last executing test programs: 8.121767985s ago: executing program 1 (id=13046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0xd0, 0x448, 0x448, 0x0, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x1550, 0x0, 0x120, 0x0, 0x1418, 0x1330, 0x14b8, 0x14b8, 0x14b8, 0x14b8, 0x14b8, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x1, [0x7, 0x34, 0x0, 0x1d, 0xa, 0x33, 0x2f, 0x2c, 0x26, 0x2d, 0x3a, 0x19, 0x22, 0x36, 0x40, 0x3f], 0x2, 0xfffffff4, 0x5}}}, {{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xffffffff, 0x0, 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x67, 0x1, 0x6}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@icmp={{0x28}, {0x12, "854d", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x0, 0x3, 0x4, 0x5, 0x4], 0x2}, {0x2, [0x4, 0x2, 0x5, 0x1, 0x0, 0x5], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x10c8, 0x10f0, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup/syz0\x00', 0x8, {0x5}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x4, 0x2}}}, {{@ip={@multicast1, @rand_addr=0x64010100, 0xff000000, 0xffffff00, 'pimreg\x00', 'macsec0\x00', {0xff}, {0xff}, 0x62, 0x1, 0x77}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1e}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x94, 0x9, @loopback, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x15b0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x181142, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'lo\x00', 0x8000}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'dvmrp1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x3, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x13e}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)='#', 0x1}], 0x1}, 0x40010) r11 = socket(0x10, 0x803, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1401000001010101000000000000000000000007500001800c00028005000100880000002c00018014000300fe8000000000000000000000000000bb14000400000000000000000000000000000000000c000280050001003a0000000600034000000000080003400000040008001a"], 0x114}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) r13 = socket(0x2, 0x80805, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r14, 0x84, 0x83, &(0x7f0000000480)={r15, 0x2}, 0x8) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000010b76c1554bd707f0100000000000000", @ANYRES32=0x0, @ANYBLOB="890c040000000000500012800b000100697036746e6c000040000280140003002001000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="0400130014000200fe"], 0x70}, 0x1, 0x0, 0x0, 0x48084}, 0x4c0c5) 7.977226364s ago: executing program 0 (id=13048): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000100), 0x4) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e00001800028008001500bb23000004001200050016000100"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0x100000004, 0x5}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000004000000080200002100"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) (async) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r8, r7}, 0xc) (async) openat$cgroup(r5, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 7.894242698s ago: executing program 3 (id=13049): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb}}, @ip_tos_u8={{0x10, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001140)={r0, 0x6, 0x100000000, 0x2}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1d, 0x0, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r8, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048184}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r4, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000001240)={0x1ac, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x55}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x16d, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @measure_req={0x26, 0x9e, {0x91, 0x0, 0x8, "1002928eaf7638e40e89b79c19ff023af4f3923cf16ce4caabc038eedb04d8e72038471e42edf32ad1006621994d522e747790bf48e89b649a9675b298f869de5f595613a0563e7d93f4b2fd1d27198c34c5b9914c7e5af9ae6af780cfc3a33412be9e35a542735da9939c215b98aefa3852a82d2de1017c30f09e400a9e686f7ef41907dc5fd075a34dab3039f88d875189c3b6b13a1575f714a9"}}, @measure_req={0x26, 0x31, {0x4, 0xb6, 0x61, "0c4ca905894c4dfbad9b6fa32737ce0439d340034c7bef73fdec21e6196efe0686d5c21f77d707fd71a1b1d8c443"}}, @measure_req={0x26, 0x68, {0x7, 0xb, 0x7f, "75e2f0df61466d2ecd3655cfafe57b4ad4b503b0d7019a0a781ff1e3772fc36f1e276db5d49b404df2fbc32716e883663e5b66a0afa99243a2f0b82c1bee6d7929d40468616fa519a10c31eca6ac0c87fccb9a4b00f06ff7664644f4f705ca0afafb0b702f"}}, @prep={0x83, 0x1f, {{}, 0x2, 0x5, @device_a, 0x2, @void, 0x2, 0x1, @broadcast, 0x100}}, @mesh_chsw={0x76, 0x6, {0x2, 0x6, 0x30, 0x8001}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.876588489s ago: executing program 1 (id=13051): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, r1) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getsockopt$ax25_int(r6, 0x101, 0x9, 0x0, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) splice(r7, 0x0, r7, 0x0, 0xf3e, 0x8) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = gettid() r10 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r9, @ANYRESOCT=r5, @ANYBLOB="089805000750050008001300", @ANYBLOB="4400000010000304f9fffffffedbdf2500070000", @ANYRESDEC=r2, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x44cc3}, 0x4000010) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000700)) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x83}], 0x4000000000002a4, 0x0, 0x0) 1.065574213s ago: executing program 0 (id=13052): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xff, 0x1}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01092020097de062bd3df4be5cde12a6d2a68b3d1527a719ad2d889e7a83d3e0ec9e0902"], 0x24) 1.060055337s ago: executing program 1 (id=13054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) gettid() sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x36, 0x7, 0x1, 0x0, "1b4f86ca8448f46cc195c5c7ab9013b1c6bc9de7b9e9df4c205801f24b02067f388f0e2d3a6f75c31b0f3da28610cbef93c0"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x78}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) 1.058685187s ago: executing program 0 (id=13055): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800000850000000500000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.055294459s ago: executing program 3 (id=13057): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000001340)={{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0xa, 0x4e24, 0x7, @loopback, 0x6}, 0xffffffffffffffff, {[0x6, 0xa, 0x7, 0x6, 0xfffffffc, 0xd9, 0xce, 0x58e6]}}, 0x5c) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=@newtaction={0xf1c, 0x30, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{0x158, 0x1, [@m_sample={0x154, 0x14, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x52}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4d0}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x800000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x7, 0x20000000, 0x4, 0x401}}]}, {0xe8, 0x6, "39f85a3629534fe951a4f6dae42049c35b6afa5e15c99c346c57c0a70216d98f890dcf9a280ce391f3529215b49ffde1e8e89c2f053dbb24d520f408ab8dd6e0b0855e181d5102b54c91d5499a502f237288339fa9bbcc80f66b6e451f4fc918ce22b2ed02d9d2c184f0a97e9d6f62f8710c1942245990c073ce0a68d414b94f3a5956a323141954c8e3fa2b951303cc68206b5fc5188616b75de16ea0fe8b8371913ad61c2901acb66c16be213360ea91e7f328f842f076e10a7dfa46d1ca9b6e2588289e0e7feda0ce9faf30b69a5e1f23101c7663b6bcc66b97a3276991b371179c1b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}, {0x548, 0x1, [@m_gact={0x1b0, 0x7, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a25, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea6, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b6e, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x3db7, 0x8, 0x6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4c, 0xadc, 0xffffffffffffffff, 0x9be, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x195e}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x20bf, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x3ac, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf6, 0x6b34550b, 0x3, 0x40, 0x1000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8fc, 0x6}}]}, {0xe7, 0x6, "bc3be173c1af72fcd73df293720993e211cefdb4209dc65c7f044f6a56a44d4e672958cd2084c07333b1a644053337891a440e5484f532d06e0b0eb7df2b7efe841f6494d9b22b1145b5472a2fb1bbc99ef848d40dff06625e1dda816d2f8c60c2bf01a408064d65c1555a8ce4e3812f3162a34d2e948fafb6976020880aca9cefa53fd060f65c4f5c8b38e584dc7d3ebeeb657b0c0e47cca9e8af10e38e510aa58668ba22fe3e60ecb4bfe0a744efa9af0c0afe8d23e549f0fa738b4918ef8276cefe0c88f9f97aa126c54ef89d5fa3b78df5c4fb653ddc496b7aceb7ee46f474bd60"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x64, 0xf, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10, 0x10000000, 0xec27, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x16, 0x6, "d33835b6c09fdedeb21ff3cad40c31059b0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xd4, 0x1a, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xfffff5db, 0x10000000, 0x1, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a65, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x381, 0x30000009}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf67, 0x986, 0x0, 0x8, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xda6, 0x2}}]}, {0x53, 0x6, "9d26dd7b8b27f10ba831c14b40411273356125d81f5b2665f98659d4702b6d3818ec51818b29253d9e7e00e32f3c54fd47b8d802ec16cb662e97a5bea1ae7380b2d7486c7e68dbb6f4719734618e51"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x164, 0x8, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0xdfc, 0x4, 0x64e, 0x3}}}, @TCA_IFE_TYPE={0x6, 0x5, 0xff7f}, @TCA_IFE_TYPE={0x6, 0x5, 0xb}, @TCA_IFE_SMAC={0xa, 0x4, @random="e81598505891"}]}, {0xf5, 0x6, "9aa317af27c12c3396dce58d63ea3a70cb083a2664b2f72e6d5843ea1a67afe908ee9497d605d90156893506f37ca6723e301f9208ffd95d787bf2c771eaf1c3eb2c74288695c235278547a57fefbca1dbf48f0ea21bd9b7e6c484b1810a20ad35a18ba8357be30d050cc8214fbf1a9e812168379c605026248296bec5d29ab837a1f5a79f41b5f10208804a796b6502f3b98c986f005dbb78f911393111b59fcea5f22f7fb916424ed35d687cbc0f38ba74fc1536701b852dfa388b11f0592d88f4ef6593e84175947b5bd657c28dadd1f8ddf520e7658f138b59017c2453e4e7ee153414898aeb81a78ae4aa7c14e9b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mpls={0xf8, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xc2, 0x6, "e24870818798063fd7a1029551a2fbca0cf50b00d386a8859c96d5d688d149fdd2fbf406540b75785cd8d74daf56bfd6f896cec5230ea6a16636080bb4f7730738604a1f77d8d29f8b75b6522d9a8888e7d22bc66fb4e71afcd8c78abe74fb3ae5992bd9bf91f3fb060e63f97834c2c8e7b24772773d424a93bdafcc8bdb1314b2fd6987b68fe9247f7249fe062159ce186d1d3817257e0fb166c374e73ba68ac87b6407c043cfa8ac0cc3c7a199065dcb1c8859d9a9f609ac844df34a15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}, {0xe4, 0x1, [@m_sample={0xe0, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x8, 0x10000000, 0xc, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}]}, {0x72, 0x6, "feb9c3025b00f33305507078d7bd32996ceb57798ccf1bbcb9f225a05a1c2e1f5eedab2c1cf9e9ed0d797e3ac8ee938e42e47288513b84ba6df10026e4a5a8ea4f7d757c99fd84e7c9827a50a87f6b21b6ced7216d7a139ba58992f634a7ac020493502b3d24ee9f5f708062f608"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x784, 0x1, [@m_csum={0x114, 0x1b, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x7, 0x7fffffff, 0x6}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x88, 0x4, 0xf, 0x8000}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x1, 0x80}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x4, 0x9bc, 0xd4}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x2, 0x2, 0x4b79}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffd, 0xe, 0x3, 0x0, 0x2}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d43, 0xfffffffe, 0x20000000, 0x0, 0x4}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x621, 0x1, 0x3, 0xb, 0x3f}, 0xc}}]}, {0x7, 0x6, '@b+'}, {0xc}, {0xc, 0x8, {0x3, 0x7}}}}, @m_sample={0x124, 0x1a, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xf0, 0x8000, 0x2, 0x3, 0x1000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x734}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0xa7, 0x6, "3b8e4a65ec7ab4f48fd97a7a1e14fcd39236fd36dcbfdd8f81805b77b9c9134b64f761c32e6a80856debdb54c7a0daacd19df85dc459ab5bf4d6c018463b86f54078828df4971bce22be2e6c029f4c416e40633a4f75422f1c4669f829c267a83ea9a6c9c800b5fc8b8e8da26b24689ab95674e9d3fc3fad0f12dc88fb432f2cde45fa5c5dc639d1beb16a8239580c9eb69ba465696cab8477bf14ce15f6d87f45935d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xf0, 0xd, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf800}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}]}, {0xaf, 0x6, "ac5a52f5158534721e52f78823c0463af1088fed12ec4fe5bc02a7348cbd7e66a8fd678f96d1fcb78d0d2d085a8e1aad408dc3f9f2fa6fff0e3c3850972eb3fd6dd61bd009bc58b2701c7b816df00f4e750240fa2d7937704b59e526a4c7cea7caa97b3b9dd0100d27ac1c3e5d9e4a01f4f87f09175e7706491d67ace0cf39e87dbb0c882d4f8e1aaac2aa05056c327625aadf73a0f18d5b932627012d5ec3ba2656751b20ddbc39f633d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xe4, 0x17, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}]}, {0x8d, 0x6, "99b84d713637683de51afd23b4eb04c5807147e6762997904bf6a0cd1f1b42e565ddf7eb3db89455cd7de38ea6e9ba51ab48afcdd289c2a5c1b6d3e78c08fc9afc91c889f95f938f34479d59e778901a1e4d017746fd35525f15ba547299d50acacd896232123493455e6fca764a8b2b3ca9efd0939b81ddb4d50f8a98baeec01330b311d730fd17e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x5c, 0x4, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x24, 0x6, "d72bba9300336a501522fc4568e07eb17adcaed830846c7a4811d81fa3264ff1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x14c, 0x19, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x101, 0x42f3, 0xffffffffffffffff, 0x3, 0x6}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x0, 0x3, 0xffff}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_SMAC={0xa, 0x4, @random="d7b1fe5946e0"}]}, {0xca, 0x6, "2ed7995844037deb41db0ea1aec709fa97c92bf863c8e1c5d59ed332b8454e4ecb9bfe5dcb0b47e6f1db927b7883b49ee8fcff88f550e5104dacfa2af90f144fec33d558d4ddb6f6fb63f013edfe2289ef76475657ded63d92e89d28434e27b9d43dc3dd6f568154726a12bff1526c6a0a6b57ac6ea8a7d59245fa9c6a1227ea91ebf1f53494a0dc91df41168b3483ba77dfefc2bfc5f825aeded749f8a7133310cf2ec720356462f9ce8a51d4deb0221bec9491644c115f1c614a5a25b89d5bd669e6b607cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x94, 0x11, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x10}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0x7, 0x176, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xa}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x200}]}, {0xd, 0x6, "68b5063aa9d0d8ba39"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x138, 0xa, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x455, 0x1, 0x5, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x5, 0x5, 0xf51, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x3, 0xffffffffffffffff, 0x8, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1160, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xaec, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xee, 0x400, 0x3, 0x8, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1234}}]}, {0x7a, 0x6, "dcc74dda8ab436736fb382c591b22d867ac68d2b722ea6a3a7ed41ea2d8aa50ddb881d088733ee9a13536c7a2cecc2762961ecaef8b21910362f54b0c09b35216bfc7cf4f8dd66e825544fc3d68a73c438b027fd270c272cbce0cb9f00004ba4f3dc4648dc36e4f720a9d55e96a414dd9a3f8e381b97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x42090) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0], 0x28}}, 0x802) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) 1.05473764s ago: executing program 2 (id=13058): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x10}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x20000000, 0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x170, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeda0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @local, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @private1, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffd, @local, 0x79e9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65, 0x0, 0x7}, @initr0, @exit, @alu={0x4, 0x0, 0x2, 0x3, 0x9, 0x0, 0x700}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r1, 0x7d9a5000) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r1, 0x7d9a5000) 1.052304863s ago: executing program 1 (id=13059): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x8, 0x5, 0x726f) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7080000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990041000000600000000800270002000000080026009a03"], 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x15}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c006}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000200)) 1.05059382s ago: executing program 2 (id=13061): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/ipc\x00') r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8913, &(0x7f0000001040)={'hsr0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @my=0x0}}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0xffffffed, 0x25dfdbfe, {0x2, 0x3f}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000001080)={0x3, 0x19, "f62ffb3498ac5844491f608cd69d07ad6c3363b8a67a46603f"}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0xfffc, @local}, 0x10) 1.049584549s ago: executing program 0 (id=13062): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x100010, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, &(0x7f0000000180)) r2 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB='X\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fedbdf257000000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a0006000802110000010000"], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001000)=ANY=[], 0xa44}, 0x1, 0x0, 0x0, 0x4004000}, 0xc800) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 1.045336378s ago: executing program 1 (id=13063): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x24011, r2, 0xef6e6000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x6, 0x4, 0x4, 0xa, 0x50c, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) connect$phonet_pipe(r0, 0x0, 0x0) 1.045140855s ago: executing program 2 (id=13064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$int_out(r0, 0x1, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad63, 0x9, 0x1, 0x4}, {0x0, 0x2, 0x8002, 0x1, 0xe, 0x80000000}, 0x1, 0x7fffffff, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200802, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x18d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c060}, 0x2880) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 1.044368878s ago: executing program 3 (id=13065): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x4, 0x84) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000080)) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x48080}, 0x20048000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000004000f22f0012800c0001006d6163766c616e00200002800800010010000000080003000100000600000000ffffffffffff0000080004f5", @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x20000090) (async) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000000)) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0x5, 0xc}, &(0x7f00000001c0)=0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r10 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x31, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x400448ca, 0x0) 882.176014ms ago: executing program 3 (id=13067): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1c}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 781.131305ms ago: executing program 4 (id=13068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007912b0000000008bd9d39c0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x80, 0x80, 0x9, 0x3, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}, {[@noop]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) pipe(&(0x7f0000000680)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x2000000) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbfa, 0x0, 0x0, 0x0, 0x9}, [@generic={0xf7, 0xd, 0x8, 0x5, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x11, &(0x7f0000000100)=""/17, 0x41100, 0x10, '\x00', r1, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0xcb3f, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f0000000440)=[r2, r3, r4, r5], &(0x7f0000000480)=[{0x0, 0x2, 0x5, 0x5}, {0x5, 0x4, 0xe, 0x6}, {0x1, 0x4, 0x1, 0x8}, {0x5, 0x1, 0x9, 0x1}, {0x3, 0x5, 0x9, 0x9}, {0x4, 0x4, 0x3, 0x3}, {0x4, 0x5, 0x7}, {0x2, 0x3, 0x4, 0x9}, {0x1, 0x1, 0x10, 0xc}], 0x10, 0x178}, 0x94) 766.363424ms ago: executing program 2 (id=13069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f00000004c0), 0x12) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xf5, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000005c0)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001106a201fa8fb4c2abb7d22d810aa4101e5e610000", 0xdf}, {&(0x7f00000029c0)="bdc99118158ffb3222a77dce29e913c7fa56753b708da3c283982b260ce5abd73c63ebd0b452b90f91943532f9d9b862c0ea33a403e4296db241fea24984873479c48ab65e8a04715da0a09b9100da082e1ef81b1b2e9c09b2cdf5c8b51d073cb8d0b31622fbdfa82a7f4098302d956b7b9603b9119bd83b0ae863bf29bfb5ff0fdec352e751f2002915b9a97ccb11880df592aa6e77c60a33c855f58eb192cbc5dedcff5f1a19734e253a03079b9396842906e486990365cb705a0e4e3f648a91bad33e1d9c1be8bc5992ede58365b3dc858c38794da48c34d24a1557e0fc43150a62c1d1225f9a51d19f1b2606972739f9e027d15be12ee570e683d0151a8698884d6c8d05afe5d5afb700e594ef8d3aa17492786b85f441597ea9f6479bd047ef6e61c8280e8a6710700b0e196bf2e6fd399c3a817b5605e594a27fc07ea2aba5430ace211fd5f561d653e54e85ddcca7620d6be2657e5fce169d4f170232d0fd3f1a3d9b599bcbe765000e5091f27dde78d0feb78d5de3b0397635d81e229ea00e5efa7052db8cffcb0290ef2b165497615dc7eafbdf5e4adfd536f2fc257fb164683216fa1ea51d22c59a2fcd654dd5475be8c62b5f15e3cc99e18fb1f646299a456d795902ba6ce70efa432ca9f50149f2fa37002c3f74506c774a25e2a0ac978bf405722480c7bf4c8b9bfbea016752c915105d5f1debfd33b2d7766c44116ad0f0952950304c5dac00ca3aa9c518b5e00daa6bbbffe7b6a4052c4f659f4144768d082048a0f92cac2b01ebabefa55058051056a172c9a9ae1823dc0abcb3748302a7ed130bd563f991304fd7955c1023b7915df60b50b6f749d38f42a65dc0789d66158826dc9c3f8762dffd884638b0a7e15edc33f70d71e6ba28ce5569ae2c23b7c71ef118e33350ee3ade0cd145124324dd051c8ba214861724a5dbdf4ebfe7cb5b5880ffe571d511fb2a4378cd7f97cf1facec9be6d8e3a26c863501eb6956c86f56de557bfcc677fa2c8c4ae3ace046b563ea1d2c10cdaf433b88b8533043ec382a41f91ecd3889d332d733560503ba0fa6edd5bd4efe1d67c1c9dd66b2e32f84ab8558ee05cf466efa964bf6f069f4fbf5c18b5aacec6555cb639957d27c2993271491d49c286bdf2beb2b7abdc43294541aeb0e838c274501b65166217b65aba77311e4cfb4b04b15039ddb45dee3d6d384f158340eabb7e85fe2c99e29677733a5c2519b8b3861cae41bf039e3225b56e1a5869387223326ecf6a700d8b66bc6eca4021c8b51ad0ecb8f05e8ae9e0ecc0486bb62f3cf91e68350db133362f9d366f2df87620bf5f04c3dedb9a14d4abb27969c3588d743cc2783920a1bf16aeb94519bf5287494ea65add2ea21e325520718ccb1d4e59a98cd9ba9dd1c33214263b61fbc00f9c698d3e9151a1b3fcc967421ce55bf34ae52e43b9c891bfed8b5c40f9b587ecc82b49711384f780f8f9a8f51f1d094803cb4233091646ac3f7b562a99955f0180e4acdad8c510a7d55d29c64fd4ce74d4d80d782b76ec33756151cda389a1e88124668091b7c32d8c5c993704597a62a1c90276e6dcbdb0834071fe19e58fe49547c0014c3d6489422761a5c6756c7db9e000c28927d41036afc500d51b19572ce23cc3d4fad112f58dd8f96531b40675c69c1401208909cb219a1687f4c9343a62642947393a5915805231ce9285af24e9b4d0db58a20b7d57097c3d6249867d4cc1260333aeb79ce9ee2a2c381af5043ea5313daf5a1e801176bea4c1da00fc3a66a12adec02f9383ecd05cba6d4249ea17822a8fde676984d955a92a366bb5ef2cab1ba34583baac450aae77ffaea53b8b6827b8e17e8656ef00b4db8488facc9ff07dd71aa2026e2d38eba66043454970221ded03d42a897cbba3135d6ba7f25b32e87bb28d3de44ebd92836b78549db24cfbbffacb7834a21827614dd1525b2db1d5ed7c0d6fef592798d8bbd5415b81657e74000dcbb3708eff98fc2a7068a2c86e557b0d65785e75f91ddd9da748574335eca12bdd7cbef736507cb8b7d5f069c85f1eb676f360bf99c8ef84a2b05080b329cfb1cc4fec775b77561bbbd32b73d4698ad7c0db6151e575d47cb8dc0c3b9600cf0563fbb43e5be4ed35c5f0e7959fc8993b0b4069d264d40ec31f547f64625e14ffbcd9f31ac8d2eb1c915ebdf65dc4a4a3031bfe3328f1b7aa98786755dbbd625c3263e15ec9f10f38ed4b866886d9c723d3b6c87bdbd229de2287964a8e4f9a5cc628a98f34bba5fcbcd2880183bf90f0ad81cb8990ff16a850c646050b8a3b90188a2538731a6033a3ae0ed5c1f340e3c52139b13520a9519c948e36c81c99ab88b609e2bcf7da3cc9ee266a2a8f1bd55ae579b053be0dc0f27de0ce4f4a88e07ec735f20f9af65ec20dd8e8faf91a3d8866a3c350b0c32e81ba5cd746860fa1f6e8e18aa529bd74dc72b1acbe27b301e93df5b2ecc7f50ffbbc95a4abb889c17785ec466d0ecd016ee59fd1267723b4834ce519600ffb62fc6204e8c618d2546c9566e1d73e183925738db6adaca72a801f1bb1bd5e820006562f894effd011fa0c983ba5627824f7699e6a998a74ff36209e0d86e4f61377828cc417d0f847454a657d3da5d326189928c1195e7f3dd0a3090649920dffe6c454a29152270a8576e764b3d75adc878d7151b8410de64c6d94d3b062c9156f2f06368eb361c73aa431ee9cc9a9a41e3c94fc0de2beac19a5eee5991d4b1f864a1034473e63365ed7a12cd3b129a5c35db0d94a01d7c6c4bd84d8757b035afc844ac498f5c492722a8ecb249e821589bf7c22c4b2836f8150008a53510efec06dd83010be258ec559bce54be8e265789e85040a16b5ff39c60bd5544aac6449b638c5cdd7a2f12142442b69ecc8a338fcdbcd47e4df5957cd5500aab6b2baf9760440e07d5e737a6c866739036a3de321da03e2d9c790fd6b6e8da189ef31010395347b588fe8faea5ee9f2741acc046f281c8ca11bf397af2cda414c68e27a87fd9b2f2e4e2c17d3bdd1d924be9f4e94baa27735f52a2673ba00666b81f344eed34d1f1a9d405a2dcc5ed4bfaba650f5979d1045d7457e03101dc0c697cc2bb477134ba83f74d4b33523a13f19f7e21e4b93f3d82f00c82a51321bfa597a6c1952bc5385a1f040f9e5f7f2e5aeb7090b5a1cb7d9d989c3abebc3fbdde02eba07f6444f6e6e1c258b42bd823d9dd8dcf6c802bf2c9380644f1a10a349a9d4e3696cc45e92f724b67fb80b605aa96e72129f33cee8052b67c50594dc2d1b4a5d85c412535786c6324957fa3a683b9f3dab22c268a38f47a1601f732f3e0365fa88d675cc7c9b4f26d9a1cb8c6e9b4e26a0d4cbbb9f0d1335d003cef9edd7072e0947fe356f0578990e81040869859e65f84eab37d658de4b23856b205b34b4f57e1e09a24757ff36bebf5f72de80795ce3596cc78419d370e83b5333cac31338ddb9af6e089d1c8fd3705db393eca05554859071bae61027ddb97eb5af3ef0bc46c0dce61ad2b487af9f150976c6e0f7ed6b1afd617bee5dd5dda65abbfb1de61f41d8d029a1143df59a788da5720e5b4f0404270e0a77b21470dbdacd5d2412fd3b0f312262f258056bfdc1ccef7d22a432b6c63659cbe23b583d7663b595f2cce73829938a8755f6902a335e4294f9c9b898d4e6c7081642d3bb4b49570bfd15eb33809e2244915e455b5c01a38c047f9cd08c826bd51532af061628d2d4f45f76a2a35e902e557a0b6dbbb2911ff3f9d69fd304b85d45ee0f3bcacb147f146a493f189649c33ac19ace6e8a9917d6df8200e379e8555a954c50e9520f917cf217c4c5577d04cddfd23dc74e96c77250fa464079fc24cbbcbdc19a2c76673852efa4cebfe6fde3d5af9293744e7d8576f93812eb44f93831bff5708b6a1bdfdb2a7a359ab1c61c2a34a255f6625c037dac521eb76f1f174e035b4f15719dc2d2625fac6682df3af738121ae4b54f326e813ed760232b2cb94777e82b375b868550963c6826aac5d8334b13252abea14cd9af12032d4e2331ba9bf8238cfcace00df7f732f2fc83690055e8e92233f2b528aa50142e9683ab6ee89505e686e56143eb7383b72254dd4e1f50bf9754f79393459ab88a07f35b1ed79ac6fceea5c81c29f759dafaa69de83993f65a522a373cb1d297ddeb235a44ba0c71f093a0bd454e7d8ec90f3f0c60c8cf7490263251cdd363c27aa2e4c19ecc2bae55b4d0ca5f2fa555f285334cc0b62b1fbaec6f770e277b178e22117940dffdc82933eba3709b8f7ada7bb7e79122c40104c6ff2947f20e5f6e22be477d687d19199b29bd1d0a5abbd3fef2879bc6ef2bc5d6e24862d41a8276aabce475fdc149e57185f34b7759ba24aadabbce50eebf1c3f38f1a05e07b8568480937e8e070e3300cdf325b9d8b3175b43cdba38316a31d84bb0f434f601baa5010434db13460d35213dc469ccc31676abffa930a58483193b28281a11dd5f996dad0ab48306558a11eedbccd9153fdffe93854235dd5bf6b86e50f100be51f13d7a492382eaf24768056abd4004ec7f4968a590cba00df5133d9dd1d0e953de41ee0276f1a2599485a8f4612203f0c01ce03f4a7ebcce59bea76a22346db3387332888b814f8ecf56a8a626bdb4dac8f3ac47af5a96e000036db4641567c02510f4487a84d39271c916fe0d597b543c02808534b703e08bfc24035d8456e09fbbb05935e36582fe39d1fd319401705a705c8709620fb77ae87f3b5e529eb35cec8ab14edc58caec0a637be5e8c97e62aeb545c484695a367e7a45446137d22ea95718f95db30804baae00909b78e0e5ac39264fcfc8853fa3b26c9bc9ffee333fe367816becd009ae8bbe64724878156190e82de9adc506c6fb9dedcff6635301b92f7d75b2da08e6c6665823f3aae55a3dc0320ca52ef50c80afcad17e9b702aa8514a96b236e36657190155880ba8ab8ffd533688f7512828ee9f19ac0be42b2bb7da117bab6421dad1518c0f5859d65b7c1c81eb91a8f6835a88be9ba00e13386644215b2a90bd58bc21e2de66ff3171cd07ef2509d4c386ea51cfc41e48fd914ca0e31cb8b1564b53a8b386ec13ec7c667445ae51e27537f96849223391d3b12c74d18b43a32e691abac93d1a6b347dbd755fe12fba1552657a3556ec2cba1c2db2ed9df483f38b84aff03536d4b6451e08152389fa5d1d722b2312239dda1226e789b53a1b32ef29b655eeaab8ff0e345640782c190b5ee9c61cc8ccf8b8e01eef2c1cae92f9eca566a0d751b720bbf160e7b79b15b9db0b5c59eea8bbf98f18d37819ea4022c0ea6c8de7e5376fc3e906df29cb620b8e613adea5216955b64470599c03093003e5c7a4597c0a87a07dfda77d6263d282cbd20fedf085c42f8eff07842309be6130aa8dab0af976c8d931e42f403dce5b2a8d1b46bca8ed33f8beba38b98f8dc7f80c65c0943b293cebcb6da1767768b07d880666bf5f466507f7c3d47da89b1b5eb72d23eb373e1b60870bc19b5710d2cd301299622b6f7ce83258f252e8d1035fbef59982febd3f50e4b6ce19f0b806e91906d0c4f2851f7b017da821b3cc4a5f163c937c93fa612b98f74120229a7e3d8c55093b8743a05d10bf0b64368c7734d28f9b3b6bbdfea4935886532d0d4f3106ae7305fb0e39a55f13ffbc45b3ca7ba6d54ac454e51fced8ac0d498e028f6cb46c7c2b252ac75544e3af3379fdc9e2e37356ca92fa3dd42e1e2e92da04dde1b5ce17bc8db3a72df3b08176593a38d", 0x1000}, {&(0x7f00000039c0)="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", 0xfe3}, {&(0x7f00000049c0)="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", 0xf21}], 0x4) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000008, 0x6e071, 0xffffffffffffffff, 0x80000000) 702.282807ms ago: executing program 3 (id=13070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="001c2c8cc6c322e835a6aa6fc0f900000000000000b703000000000000850000000c000000b707000000000000180100002020812500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4203}, 0x94) 666.843351ms ago: executing program 3 (id=13071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$isdn(0x22, 0x3, 0x22) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x80) sendmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1}}], 0x1, 0x8810) accept$packet(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r6, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) write$cgroup_subtree(r0, 0x0, 0x32600) 632.65475ms ago: executing program 4 (id=13072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r0, &(0x7f0000000a80), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x9, 0x14, 0x1080, r0, 0xc78, '\x00', 0x0, r1, 0x0, 0x0, 0x1, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000340)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) socket$inet(0x2, 0x1, 0x100) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r2, 0xbfcca000) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, &(0x7f00000000c0)=""/193}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000b608000000000018110002", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ae30a55d0000000300000095000000000000007fb8adf6bae9"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 516.963363ms ago: executing program 1 (id=13073): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800000850000000500000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 430.397639ms ago: executing program 2 (id=13074): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09dea4afb76288fa135537845f3188b4cb061c94084050d49b5f9dc271450ebc85f9479e56e3800f492b76e4254daff0a408", 0x32}, {&(0x7f0000000000)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2}], 0x1, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f00000008c0)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xca}, 0x94) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYBLOB="77a4a29a24c41d6a54552a3b3522747443ad94b5ba0a41fe0c7e324300", @ANYBLOB="20000100", @ANYRES32=r0, @ANYBLOB="020003006401010100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04020000", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x252dca6cc367791}, 0x240008c1) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250b000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x8000010) 430.148456ms ago: executing program 4 (id=13075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x9, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000001640)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x6, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='@'], 0x40}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x4, @mcast2, 0x60}, 0x1c, 0x0}}], 0x2, 0x24020080) (async) write$tun(r0, &(0x7f0000000040)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0xb, 0x4, 0x0, 0x8, 0x54, 0x66, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@generic={0x44, 0x8, "4a076ea6c366"}, @generic={0x94, 0xd, "c3db8eaaa8f10228d03948"}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}}}}, 0x62) 259.375444ms ago: executing program 2 (id=13076): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x20, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x700, 0x98, 0xe2f, 0x7fffffff, {{0x24, 0x4, 0x1, 0x35, 0x90, 0x67, 0x0, 0xff, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, {[@rr={0x7, 0xf, 0x57, [@broadcast, @multicast1, @broadcast]}, @ssrr={0x89, 0x27, 0x50, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @multicast1, @loopback, @private=0x3, @empty, @loopback]}, @timestamp_addr={0x44, 0x44, 0x30, 0x1, 0x5, [{@remote, 0x5}, {@multicast2}, {@rand_addr=0x64010100, 0x4}, {@empty, 0x7}, {@loopback, 0x6}, {@local, 0x6}, {@multicast2, 0x3}, {@local}]}]}}}}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)=@getchain={0x34, 0x66, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xffe0, 0x6}, {0xc, 0x1}}, [{0x8, 0xb, 0x24}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0xf, &(0x7f0000000200), &(0x7f0000000480)=0x4) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_emit_ethernet(0x87a2f, 0x0, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) (rerun: 64) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd21, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) unshare(0x20040600) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, &(0x7f0000003080)) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="060000000000000004000000", @ANYRES32, @ANYBLOB="5c04139b4aa47b997929323ef33659faebb7f021b8df940c5ed67fc43a4f98ec2f57cdf300b14ba5578ad3ec0d431fbd9782664b16910e9f137f4ba7894f041e150053fed924b88e7ea3b1babb1e4317dca2cfeafeb607cfed122d0195de057322bf1ba60c6c9da02e286c74bab18a1ec25df6cfdf982b2bacc55b46e84bfddaea337a40b6e882dec935bf870f85b8f991a2b9972c9d0069eaa7ba479a928c1f0a516f90ad53468493f66b7bae54ca4125bd362d3af48f405fdab6c64260710d51caf60b67aabdb005357e081745fb874696a9bcc922bb59b52c69b7096e373d681193fdea0de67ffd09b31ebfc784d8c1b48e59e1", @ANYRES64=0x0], 0x20) (async, rerun: 64) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000500)={{0x2, 0x4e22, @empty}, {0x6}, 0x0, {0x2, 0x4e23, @broadcast}, 'syzkaller0\x00'}) (rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x34, &(0x7f00000000c0)=0x5093, 0x4) ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'nicvf0\x00', @multicast}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x4) 179.413167ms ago: executing program 4 (id=13077): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0xf, 0x1, 0x7}]}, {0x0, [0x4f, 0x0]}}, 0x0, 0x28, 0x0, 0x9}, 0x28) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10) 140.613093ms ago: executing program 0 (id=13078): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8) (async) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x1003, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20000000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000300)=0x5, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, r4, 0x111, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x20}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6805}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c840}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 61.895841ms ago: executing program 4 (id=13079): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x25, &(0x7f0000000340), 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 30.895751ms ago: executing program 0 (id=13080): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x9, 0x6, {{0xa, 0x4, 0x0, 0xa, 0x28, 0x65, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@lsrr={0x83, 0x7, 0xce, [@dev={0xac, 0x14, 0x14, 0x11}]}, @generic={0x6ba77cfb30895758, 0x8, "481c40c0346c"}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={0x0, 0x0, 0x0, r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r0, 0x20, &(0x7f0000000b00)={&(0x7f0000000a80)=""/51, 0x33, 0x0, &(0x7f0000000ac0)=""/50, 0x32}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2d}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}]}, 0x0, 0x0, 0x95, &(0x7f0000000980)=""/149, 0x41000, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x7, 0x7}, 0x10, r2, 0x0, 0x2, 0x0, &(0x7f0000000b80)=[{0x1, 0x2, 0xa, 0xc}, {0x5, 0x1, 0xd, 0x6}], 0x10, 0x4}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000380)=0xb, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=13081): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) kernel console output (not intermixed with test programs): sing attributes in process `syz.0.11659'. [ 2178.890484][T23044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11659'. [ 2178.909886][T23044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11659'. [ 2178.969798][T23042] Can't find ip_set type bitmap:ip,mac [ 2178.995060][T23037] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11661'. [ 2179.081714][T23056] syzkaller0: entered promiscuous mode [ 2179.096758][T23056] syzkaller0: entered allmulticast mode [ 2179.145751][T23056] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11664'. [ 2179.400059][T23062] lo speed is unknown, defaulting to 1000 [ 2179.589429][T23069] lo speed is unknown, defaulting to 1000 [ 2180.451877][T23118] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2180.655418][T23132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11682'. [ 2180.717703][T23119] syzkaller1: entered promiscuous mode [ 2180.727995][T23119] syzkaller1: entered allmulticast mode [ 2180.838749][T23140] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11685'. [ 2180.944668][T23142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11686'. [ 2180.953894][T23142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11686'. [ 2181.095369][T23149] netlink: 'syz.2.11688': attribute type 1 has an invalid length. [ 2181.216626][T23152] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2181.240151][T23154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2181.253500][T23154] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2181.362960][T23149] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2181.379631][T23149] bond0 (unregistering): Released all slaves [ 2181.597924][T23186] netlink: 'syz.2.11696': attribute type 1 has an invalid length. [ 2181.638965][T23188] lo speed is unknown, defaulting to 1000 [ 2181.653996][T23186] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 2181.838596][T23208] netlink: 'syz.3.11702': attribute type 2 has an invalid length. [ 2181.916559][T23208] l24): entered promiscuous mode [ 2182.443615][T23254] syzkaller0: entered promiscuous mode [ 2182.449120][T23254] syzkaller0: entered allmulticast mode [ 2184.506340][T23279] tipc: Enabling of bearer rejected, failed to enable media [ 2184.542538][T23281] __nla_validate_parse: 11 callbacks suppressed [ 2184.542557][T23281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11722'. [ 2184.669237][T23295] IPVS: length: 19 != 8 [ 2184.811804][T23305] netlink: 116 bytes leftover after parsing attributes in process `syz.2.11727'. [ 2184.823145][T23307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11728'. [ 2184.858039][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11728'. [ 2184.991357][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11728'. [ 2191.598560][T23340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11735'. [ 2191.744884][T23351] netlink: 'syz.0.11732': attribute type 1 has an invalid length. [ 2191.816260][T16188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2191.830441][T16188] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2191.842497][ T3968] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2191.872801][T23345] lo speed is unknown, defaulting to 1000 [ 2191.883859][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11732'. [ 2191.921244][T23356] lo speed is unknown, defaulting to 1000 [ 2191.928570][T23350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11733'. [ 2192.031006][T23364] netlink: 'syz.1.11738': attribute type 1 has an invalid length. [ 2192.043117][ T3968] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2192.135113][T23370] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 2192.144083][T23370] openvswitch: netlink: Message has 16 unknown bytes. [ 2192.290864][ T3973] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2192.488050][T23389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11743'. [ 2192.555081][T23399] netlink: 'syz.4.11747': attribute type 27 has an invalid length. [ 2192.571312][T23399] bridge0: left allmulticast mode [ 2192.577592][T23399] veth0_to_team: left promiscuous mode [ 2192.583835][T23399] veth0_to_team: left allmulticast mode [ 2192.607236][T23399] batadv_slave_0: left promiscuous mode [ 2192.616522][T23399] batadv_slave_0: left allmulticast mode [ 2192.624466][T23399] geneve3: left promiscuous mode [ 2192.653560][T23399] geneve3: left allmulticast mode [ 2192.666086][T23399] vlan2: left promiscuous mode [ 2192.687827][T23399] bond6: left promiscuous mode [ 2192.693290][T23399] batadv0: left promiscuous mode [ 2192.698567][T23399] vlan2: left allmulticast mode [ 2192.705431][T23409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11748'. [ 2192.714737][T23409] nbd: must specify a size in bytes for the device [ 2192.717018][T23399] bond6: left allmulticast mode [ 2192.727249][T23399] batadv0: left allmulticast mode [ 2192.735236][T23399] vxlan1: left promiscuous mode [ 2192.741008][T23399] vxlan1: left allmulticast mode [ 2192.777089][T23419] netlink: 'syz.2.11751': attribute type 1 has an invalid length. [ 2192.785850][T23419] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11751'. [ 2192.795358][T23419] netlink: 658 bytes leftover after parsing attributes in process `syz.2.11751'. [ 2192.817972][T23405] syzkaller0: entered promiscuous mode [ 2192.824088][T23405] syzkaller0: entered allmulticast mode [ 2192.841783][T23404] tap0: tun_chr_ioctl cmd 2148553947 [ 2192.966649][T23422] tipc: Enabled bearer , priority 0 [ 2193.023990][T23426] netlink: 'syz.2.11753': attribute type 9 has an invalid length. [ 2193.025524][T23422] syzkaller0: entered promiscuous mode [ 2193.041435][T23422] syzkaller0: entered allmulticast mode [ 2193.048273][T23422] tipc: Resetting bearer [ 2193.067886][T23431] netlink: 'syz.2.11753': attribute type 9 has an invalid length. [ 2193.095179][T23421] tipc: Resetting bearer [ 2193.187364][T23436] netlink: 'syz.4.11755': attribute type 15 has an invalid length. [ 2193.196256][T23436] netlink: 666 bytes leftover after parsing attributes in process `syz.4.11755'. [ 2194.036451][T23450] netlink: 'syz.0.11758': attribute type 3 has an invalid length. [ 2194.219283][T23452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2195.598716][T23421] tipc: Disabling bearer [ 2195.648777][ T2407] block nbd4: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 60 seconds [ 2195.659721][ T2407] block nbd4: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 60 seconds [ 2195.670922][ T2407] block nbd4: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 60 seconds [ 2195.681969][ T2407] block nbd4: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 60 seconds [ 2195.787680][T23465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11761'. [ 2195.962640][ T5191] udevd[5191]: worker [21452] /devices/virtual/block/nbd4 is taking a long time [ 2195.978809][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11765'. [ 2196.201018][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2196.397287][T23490] dummy0: mtu less than device minimum [ 2197.036968][T23516] syzkaller1: entered promiscuous mode [ 2197.045338][T23516] syzkaller1: entered allmulticast mode [ 2199.335682][ T6672] lec:lec_start_xmit: lec0:No lecd attached [ 2202.942224][T23552] __nla_validate_parse: 2 callbacks suppressed [ 2202.942245][T23552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11778'. [ 2202.957955][T23536] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2202.978424][T23536] bond7 (unregistering): Released all slaves [ 2203.014865][T23553] netlink: 'syz.0.11775': attribute type 1 has an invalid length. [ 2203.038666][T23553] netlink: 'syz.0.11775': attribute type 3 has an invalid length. [ 2203.041996][T23538] lo speed is unknown, defaulting to 1000 [ 2203.080724][T23553] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11775'. [ 2203.115264][T23536] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2203.128704][T23536] bond7 (unregistering): Released all slaves [ 2203.150741][T23553] NCSI netlink: No device for ifindex 813332851 [ 2203.282766][T23536] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2203.288181][T23571] netlink: 'syz.2.11783': attribute type 1 has an invalid length. [ 2203.303273][T23571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11783'. [ 2203.304755][T23536] bond7 (unregistering): Released all slaves [ 2203.417614][T23536] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2203.434129][T23536] bond7 (unregistering): Released all slaves [ 2203.546451][T23536] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2203.562314][T23536] bond7 (unregistering): Released all slaves [ 2203.578923][T23582] xt_hashlimit: max too large, truncated to 1048576 [ 2203.586023][T23582] xt_bpf: check failed: parse error [ 2203.697221][T23536] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 2203.710233][T23536] bond7 (unregistering): Released all slaves [ 2203.734710][T23591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11789'. [ 2203.746300][T23592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11788'. [ 2203.844513][T23597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11790'. [ 2203.947069][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11791'. [ 2203.963220][T23591] nbd0: detected capacity change from 0 to 63 [ 2203.987332][ T959] block nbd0: Receive control failed (result -104) [ 2204.072833][T23605] syzkaller0: entered promiscuous mode [ 2204.085529][T23605] syzkaller0: entered allmulticast mode [ 2204.348771][T23623] netlink: 'syz.2.11796': attribute type 1 has an invalid length. [ 2204.382956][T23623] netlink: 'syz.2.11796': attribute type 2 has an invalid length. [ 2204.452229][T23630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11799'. [ 2204.473049][T23632] netlink: 'syz.2.11796': attribute type 1 has an invalid length. [ 2204.481137][T23632] netlink: 'syz.2.11796': attribute type 2 has an invalid length. [ 2204.600790][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2204.679412][ T3973] lo speed is unknown, defaulting to 1000 [ 2204.773825][T23651] netlink: 'syz.0.11804': attribute type 1 has an invalid length. [ 2204.790112][T23649] lo speed is unknown, defaulting to 1000 [ 2204.824970][T23654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11805'. [ 2204.827429][T23651] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11804'. [ 2205.000698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 2205.008797][ C1] lec:lec_tx_timeout: lec0 [ 2205.384093][T23679] veth3: entered promiscuous mode [ 2205.409646][T23678] lo speed is unknown, defaulting to 1000 [ 2205.517028][T23666] siw: device registration error -23 [ 2205.589954][T23697] tipc: Enabled bearer , priority 0 [ 2205.597677][T23697] syzkaller0: entered promiscuous mode [ 2205.603387][T23697] syzkaller0: entered allmulticast mode [ 2205.620939][T23697] tipc: Resetting bearer [ 2205.635570][T23695] tipc: Resetting bearer [ 2205.658687][T23695] tipc: Disabling bearer [ 2205.771042][T23709] netlink: 'syz.4.11822': attribute type 1 has an invalid length. [ 2205.970241][T23716] netlink: 'syz.3.11825': attribute type 13 has an invalid length. [ 2206.097658][T23716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2206.376207][T23732] tipc: Started in network mode [ 2206.383944][T23732] tipc: Node identity 465ffb930fdf, cluster identity 4711 [ 2206.399426][T23732] tipc: Enabled bearer , priority 0 [ 2206.478560][T23730] syzkaller0: entered promiscuous mode [ 2206.503258][T23730] syzkaller0: entered allmulticast mode [ 2206.519781][T23728] lo speed is unknown, defaulting to 1000 [ 2206.928021][T23729] tipc: Resetting bearer [ 2207.039193][T23729] tipc: Disabling bearer [ 2207.132386][T23745] vlan1: entered allmulticast mode [ 2207.149605][T23745] bond0: entered allmulticast mode [ 2207.155740][T23745] bond_slave_0: entered allmulticast mode [ 2207.163687][T23745] bond_slave_1: entered allmulticast mode [ 2207.237029][T23748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2207.254779][T23748] bond_slave_0: left allmulticast mode [ 2207.264863][T23748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2207.281766][T23748] bond_slave_1: left allmulticast mode [ 2207.287735][T23748] bond0 (unregistering): Released all slaves [ 2207.692659][T23776] gtp0: entered promiscuous mode [ 2207.697991][T23776] gtp0: entered allmulticast mode [ 2207.892851][T23791] bridge0: entered allmulticast mode [ 2207.980791][T23798] __nla_validate_parse: 7 callbacks suppressed [ 2207.980810][T23798] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11847'. [ 2208.030802][T23798] netlink: 19 bytes leftover after parsing attributes in process `syz.4.11847'. [ 2208.053386][T23798] netlink: 19 bytes leftover after parsing attributes in process `syz.4.11847'. [ 2208.288104][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11851'. [ 2214.568129][T23855] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 2214.587288][T23855] openvswitch: netlink: Message has 16 unknown bytes. [ 2214.607003][T23853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2214.650284][T23864] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 2214.659705][T23853] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 2215.092541][T23904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11870'. [ 2215.111063][T23903] syzkaller0: entered promiscuous mode [ 2215.116651][T23903] syzkaller0: entered allmulticast mode [ 2215.124837][T23906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11873'. [ 2215.339845][T23921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11879'. [ 2215.373434][T23917] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11878'. [ 2215.403849][T23924] xt_TCPMSS: Only works on TCP SYN packets [ 2215.702342][T23946] netlink: 'syz.4.11887': attribute type 2 has an invalid length. [ 2215.710354][T23946] netlink: 'syz.4.11887': attribute type 1 has an invalid length. [ 2215.716491][T23949] openvswitch: netlink: Multiple metadata blocks provided [ 2215.722244][T23947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11887'. [ 2215.759609][T23949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11888'. [ 2215.881834][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11890'. [ 2215.901485][T23959] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11891'. [ 2216.032529][T23959] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2216.179058][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11894'. [ 2216.184721][T23986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11896'. [ 2216.250257][T23966] netlink: 'syz.2.11894': attribute type 142 has an invalid length. [ 2216.305493][T23981] lo speed is unknown, defaulting to 1000 [ 2216.460760][T16185] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.520807][T16185] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.721390][T24015] netlink: 'syz.4.11905': attribute type 6 has an invalid length. [ 2216.733595][T16185] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.770777][T16185] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2217.148353][T24048] netlink: 'syz.0.11916': attribute type 10 has an invalid length. [ 2217.182535][T24048] team0: Port device dummy0 added [ 2217.192378][T24048] netlink: 'syz.0.11916': attribute type 10 has an invalid length. [ 2217.218825][T24048] team0: Port device dummy0 removed [ 2217.243966][T24048] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2217.726176][T24070] team0: Port device team_slave_0 removed [ 2217.905027][T24076] syzkaller1: entered promiscuous mode [ 2217.915805][T24076] syzkaller1: entered allmulticast mode [ 2218.394991][T24112] lo speed is unknown, defaulting to 1000 [ 2218.460170][T24118] IPVS: length: 115 != 24 [ 2218.683139][ T959] Bluetooth: hci5: command tx timeout [ 2218.781667][T24132] netlink: 'syz.4.11939': attribute type 13 has an invalid length. [ 2218.803160][T24132] netlink: 'syz.4.11939': attribute type 17 has an invalid length. [ 2219.191296][T24142] netlink: 'syz.2.11941': attribute type 1 has an invalid length. [ 2219.217239][T24132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2219.226002][T24132] 8021q: adding VLAN 0 to HW filter on device team0 [ 2219.241574][T24132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2219.859222][T24164] vlan3: entered promiscuous mode [ 2219.870897][T24164] bridge0: entered promiscuous mode [ 2219.919483][T24163] lo speed is unknown, defaulting to 1000 [ 2219.930242][T24169] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2220.268068][T24179] lo speed is unknown, defaulting to 1000 [ 2220.366234][T24190] __nla_validate_parse: 12 callbacks suppressed [ 2220.366255][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11955'. [ 2220.625031][T24204] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11958'. [ 2220.656559][T24205] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11958'. [ 2220.933142][T24217] netlink: 'syz.0.11959': attribute type 6 has an invalid length. [ 2221.014610][T24218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11959'. [ 2221.885737][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2225.730965][ T2063] block nbd4: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 90 seconds [ 2225.741690][ T2063] block nbd4: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 90 seconds [ 2225.752585][ T2063] block nbd4: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 90 seconds [ 2225.763518][ T2063] block nbd4: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 90 seconds [ 2226.920716][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 2226.928765][ C1] lec:lec_tx_timeout: lec0 [ 2229.828110][T24243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11965'. [ 2229.843441][T24247] batadv1: entered promiscuous mode [ 2229.851988][T24247] batadv1: entered allmulticast mode [ 2229.891669][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11965'. [ 2229.916339][T24243] bridge8: entered promiscuous mode [ 2229.924346][T24243] bridge8: port 1(macsec0) entered blocking state [ 2229.931531][T24243] bridge8: port 1(macsec0) entered disabled state [ 2229.938297][T24243] macsec0: entered allmulticast mode [ 2229.944187][T24243] bridge8: entered allmulticast mode [ 2229.968886][T24243] macsec0: left allmulticast mode [ 2229.974805][T24243] bridge8: left allmulticast mode [ 2229.990433][T24243] bridge8: left promiscuous mode [ 2230.051019][T24246] syzkaller0: entered promiscuous mode [ 2230.056544][T24246] syzkaller0: entered allmulticast mode [ 2230.072499][T24260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11967'. [ 2230.134258][T24258] tipc: Enabling of bearer rejected, failed to enable media [ 2230.154552][T24258] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11966'. [ 2230.168303][T24263] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 2230.329975][T24272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11970'. [ 2230.346764][T24275] delete_channel: no stack [ 2231.004977][T24316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11983'. [ 2231.154706][T24325] vxcan1: entered promiscuous mode [ 2231.861085][T24359] netlink: 'syz.1.11995': attribute type 10 has an invalid length. [ 2232.273247][T24372] bond0 (unregistering): Released all slaves [ 2232.523529][T24394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2232.752548][T24421] syzkaller0: refused to change device tx_queue_len [ 2233.052402][T24432] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 2233.117928][T24440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12020'. [ 2233.128042][T24440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12020'. [ 2233.193834][T24444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2233.252109][T24446] netlink: 'syz.2.12023': attribute type 4 has an invalid length. [ 2233.293689][T24446] batman_adv: batadv0: Adding interface: dummy0 [ 2233.310733][T24446] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2233.367395][T24446] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 2233.559482][T24462] lo speed is unknown, defaulting to 1000 [ 2233.629858][T24470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12030'. [ 2233.670414][T24474] netlink: 'syz.4.12031': attribute type 10 has an invalid length. [ 2233.682902][T24474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2233.694900][T24474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2233.733310][T24474] team0: Port device hsr0 added [ 2233.743587][T24477] netlink: 'syz.3.12032': attribute type 1 has an invalid length. [ 2233.785195][T24477] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12032'. [ 2233.929808][T24484] lo speed is unknown, defaulting to 1000 [ 2233.957538][T24484] lo speed is unknown, defaulting to 1000 [ 2233.966008][T24484] lo speed is unknown, defaulting to 1000 [ 2234.051741][ T2063] block nbd0: Possible stuck request ffff88803c9c0000: control (read@0,1024B). Runtime 30 seconds [ 2234.062476][ T2063] block nbd0: Possible stuck request ffff88803c9c0200: control (read@1024,1024B). Runtime 30 seconds [ 2234.073453][ T2063] block nbd0: Possible stuck request ffff88803c9c0400: control (read@2048,1024B). Runtime 30 seconds [ 2234.086422][ T2063] block nbd0: Possible stuck request ffff88803c9c0600: control (read@3072,1024B). Runtime 30 seconds [ 2234.510174][T24484] infiniband syz0: set active [ 2234.515471][ T3968] lo speed is unknown, defaulting to 1000 [ 2234.527068][T24484] infiniband syz0: added lo [ 2234.564432][T24505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2234.566358][T24484] RDS/IB: syz0: added [ 2234.571708][T24505] IPv6: NLM_F_CREATE should be set when creating new route [ 2234.571865][T24505] IPv6: NLM_F_CREATE should be set when creating new route [ 2234.571889][T24505] IPv6: NLM_F_CREATE should be set when creating new route [ 2234.597903][T24484] smc: adding ib device syz0 with port count 1 [ 2234.605133][T24484] smc: ib device syz0 port 1 has no pnetid [ 2234.612601][ T3973] lo speed is unknown, defaulting to 1000 [ 2234.620204][T24484] lo speed is unknown, defaulting to 1000 [ 2234.751293][T24508] netlink: 'syz.0.12040': attribute type 1 has an invalid length. [ 2234.773889][T24509] gretap1: entered allmulticast mode [ 2234.977077][T24484] lo speed is unknown, defaulting to 1000 [ 2235.277256][T24529] x_tables: duplicate underflow at hook 2 [ 2235.520989][T24536] __nla_validate_parse: 1 callbacks suppressed [ 2235.521010][T24536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12046'. [ 2235.677125][T24538] netlink: 'syz.0.12047': attribute type 5 has an invalid length. [ 2235.701231][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12049'. [ 2235.739805][T24544] ip6gretap0: entered promiscuous mode [ 2235.800433][T24544] ip6gretap0: left promiscuous mode [ 2235.836245][T24484] lo speed is unknown, defaulting to 1000 [ 2236.186208][T24484] lo speed is unknown, defaulting to 1000 [ 2236.435884][T24484] lo speed is unknown, defaulting to 1000 [ 2236.651191][T24484] lo speed is unknown, defaulting to 1000 [ 2236.868576][T24484] lo speed is unknown, defaulting to 1000 [ 2237.073569][T24549] lo speed is unknown, defaulting to 1000 [ 2237.179919][T24553] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2237.316165][T24562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12054'. [ 2237.339480][T24560] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2237.357389][T24562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12054'. [ 2237.379694][T24560] bond7 (unregistering): Released all slaves [ 2237.453321][T24573] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12057'. [ 2237.724446][T24590] lo: Caught tx_queue_len zero misconfig [ 2237.840433][T24592] lo speed is unknown, defaulting to 1000 [ 2237.848215][T24592] lo speed is unknown, defaulting to 1000 [ 2238.041952][T24606] netlink: 'syz.2.12066': attribute type 2 has an invalid length. [ 2238.541772][T24630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12072'. [ 2245.120795][T24657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12074'. [ 2245.129282][T24661] netlink: 'syz.3.12077': attribute type 1 has an invalid length. [ 2245.138552][T24661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2245.149581][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12077'. [ 2245.241716][T24662] tipc: Enabled bearer , priority 0 [ 2245.255825][T24663] syzkaller0: entered promiscuous mode [ 2245.262841][T24663] syzkaller0: entered allmulticast mode [ 2245.271663][T24662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12075'. [ 2245.281557][T24663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12075'. [ 2245.317824][T24671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12079'. [ 2245.318126][T24672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12081'. [ 2245.350845][T24660] tipc: Resetting bearer [ 2245.402769][T24675] netlink: 232 bytes leftover after parsing attributes in process `syz.2.12082'. [ 2245.431177][T24660] tipc: Disabling bearer [ 2245.513328][T24672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2245.574378][T24676] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2245.599748][T24676] team0: Port device macvlan2 added [ 2245.777219][T24697] netlink: 'syz.2.12091': attribute type 142 has an invalid length. [ 2245.969960][T24713] netlink: 'syz.1.12093': attribute type 2 has an invalid length. [ 2246.064711][T24722] geneve2: entered allmulticast mode [ 2246.080526][T16195] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.098194][T16194] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.115284][T16194] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.250779][T16194] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.309977][T24738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12097'. [ 2246.320746][T24738] netlink: 'syz.3.12097': attribute type 2 has an invalid length. [ 2246.330508][T24740] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.12098'. [ 2246.348827][T24738] !©9: entered promiscuous mode [ 2246.355907][T24738] netlink: 'syz.3.12097': attribute type 2 has an invalid length. [ 2246.365502][T24738] !©9: left promiscuous mode [ 2246.470561][T24752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2246.626971][T24761] rdma_rxe: rxe_newlink: failed to add wg1 [ 2246.658189][T24762] siw: device registration error -23 [ 2246.776831][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12105'. [ 2247.558615][T24820] tipc: Enabling of bearer rejected, failed to enable media [ 2247.893090][T24840] sock: sock_set_timeout: `syz.4.12128' (pid 24840) tries to set negative timeout [ 2248.167159][T24850] netlink: 'syz.4.12131': attribute type 14 has an invalid length. [ 2248.177269][T24850] netlink: 'syz.4.12131': attribute type 13 has an invalid length. [ 2248.289642][T24854] syzkaller1: entered promiscuous mode [ 2248.316700][T24854] syzkaller1: entered allmulticast mode [ 2248.554330][ T30] audit: type=1804 audit(1773634254.228:29): pid=24858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12133" name="/newroot/584/memory.events" dev="tmpfs" ino=3016 res=1 errno=0 [ 2248.669782][ T30] audit: type=1800 audit(1773634254.228:30): pid=24858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12133" name="memory.events" dev="tmpfs" ino=3016 res=0 errno=0 [ 2249.663461][T24892] netlink: zone id is out of range [ 2249.668623][T24892] netlink: zone id is out of range [ 2249.711889][T24892] netlink: zone id is out of range [ 2249.712013][T24894] syz0: rxe_newlink: already configured on lo [ 2249.717087][T24892] netlink: zone id is out of range [ 2249.717119][T24892] netlink: zone id is out of range [ 2249.727033][T24893] netlink: 'syz.3.12142': attribute type 2 has an invalid length. [ 2249.744641][T24892] netlink: zone id is out of range [ 2249.759038][T24893] !©9: entered promiscuous mode [ 2249.765963][T24892] netlink: zone id is out of range [ 2249.777354][T24892] netlink: zone id is out of range [ 2249.788725][T24899] netlink: 'syz.3.12142': attribute type 2 has an invalid length. [ 2249.831263][T24899] !©9: left promiscuous mode [ 2250.063869][T24908] syzkaller1: entered promiscuous mode [ 2250.076118][T24915] xt_addrtype: ipv6 does not support BROADCAST matching [ 2250.083503][T24908] syzkaller1: entered allmulticast mode [ 2250.113739][T24910] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2250.216961][T24923] __nla_validate_parse: 6 callbacks suppressed [ 2250.216985][T24923] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12149'. [ 2250.306600][T24923] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12149'. [ 2250.419006][T24923] erspan1: entered promiscuous mode [ 2250.425514][T24923] erspan1: entered allmulticast mode [ 2250.678980][T24936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12152'. [ 2250.805247][T24943] bond0: entered promiscuous mode [ 2250.810331][T24943] bond_slave_0: entered promiscuous mode [ 2250.816581][T24943] bond_slave_1: entered promiscuous mode [ 2250.846760][T24943] batadv0: entered promiscuous mode [ 2250.862804][T24943] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 2250.877836][T24943] bond0: left promiscuous mode [ 2250.893620][T24943] bond_slave_0: left promiscuous mode [ 2250.910273][T24943] bond_slave_1: left promiscuous mode [ 2250.927413][T24943] batadv0: left promiscuous mode [ 2253.241088][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2255.801591][ T2063] block nbd4: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 120 seconds [ 2255.812665][ T2063] block nbd4: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 120 seconds [ 2255.823823][ T2063] block nbd4: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 120 seconds [ 2255.834837][ T2063] block nbd4: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 120 seconds [ 2256.737746][T24976] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2256.771554][T24978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12156'. [ 2257.275289][T25004] net_ratelimit: 46 callbacks suppressed [ 2257.275311][T25004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2257.520190][T25018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12169'. [ 2257.530070][T25018] x_tables: duplicate underflow at hook 1 [ 2257.642378][T25024] netlink: 'syz.2.12171': attribute type 10 has an invalid length. [ 2257.801880][T25033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12174'. [ 2257.923426][T25040] openvswitch: netlink: IP tunnel dst address not specified [ 2257.984785][T25045] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12177'. [ 2257.988207][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12176'. [ 2258.115903][T25050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2258.120431][ T30] audit: type=1800 audit(1773634263.798:31): pid=25036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12174" name="cgroup.controllers" dev="tmpfs" ino=645 res=0 errno=0 [ 2258.276830][T25054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12180'. [ 2258.306179][T25054] netlink: 'syz.0.12180': attribute type 1 has an invalid length. [ 2258.504668][T25044] bridge0: left allmulticast mode [ 2258.537948][T25044] macvtap0: left promiscuous mode [ 2258.698720][T25079] netlink: 'syz.2.12183': attribute type 4 has an invalid length. [ 2258.718598][T25079] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12183'. [ 2258.745875][T25082] pim6reg1: entered promiscuous mode [ 2258.751800][T25082] pim6reg1: entered allmulticast mode [ 2258.774933][T25079] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 2258.848334][T25086] netlink: 'syz.1.12184': attribute type 1 has an invalid length. [ 2258.981367][T25102] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2259.366349][T25120] lo speed is unknown, defaulting to 1000 [ 2259.410337][T25120] lo speed is unknown, defaulting to 1000 [ 2259.417182][T25126] lo speed is unknown, defaulting to 1000 [ 2259.418960][T25137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12195'. [ 2259.454717][T25121] lo speed is unknown, defaulting to 1000 [ 2259.532228][T25146] netlink: 'syz.3.12198': attribute type 1 has an invalid length. [ 2259.549084][T25146] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12198'. [ 2259.568843][T25146] netlink: 'syz.3.12198': attribute type 1 has an invalid length. [ 2259.595004][T25146] netlink: 'syz.3.12198': attribute type 8 has an invalid length. [ 2259.610002][T25146] netlink: 606 bytes leftover after parsing attributes in process `syz.3.12198'. [ 2259.829648][T25126] lo speed is unknown, defaulting to 1000 [ 2260.282620][T10453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2260.305312][T25173] openvswitch: : Dropping previously announced user features [ 2260.315433][T10453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2260.325926][T10453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2260.335187][T10453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2260.345319][T10453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2260.437814][T25172] lo speed is unknown, defaulting to 1000 [ 2260.564511][T25121] lo speed is unknown, defaulting to 1000 [ 2260.949797][T25172] lo speed is unknown, defaulting to 1000 [ 2261.078186][T25199] netlink: 'syz.3.12207': attribute type 21 has an invalid length. [ 2261.328437][T25182] lo speed is unknown, defaulting to 1000 [ 2261.355300][T25182] lo speed is unknown, defaulting to 1000 [ 2262.270006][T25172] chnl_net:caif_netlink_parms(): no params data found [ 2262.444415][ T959] Bluetooth: hci0: command tx timeout [ 2262.533740][T25240] syzkaller0: entered promiscuous mode [ 2262.539231][T25240] syzkaller0: entered allmulticast mode [ 2262.583929][T25240] netlink: 'syz.3.12210': attribute type 3 has an invalid length. [ 2262.671291][ T6672] lec:lec_start_xmit: lec0:No lecd attached [ 2264.121811][ T2063] block nbd0: Possible stuck request ffff88803c9c0000: control (read@0,1024B). Runtime 60 seconds [ 2264.143135][ T2063] block nbd0: Possible stuck request ffff88803c9c0200: control (read@1024,1024B). Runtime 60 seconds [ 2264.154314][ T2063] block nbd0: Possible stuck request ffff88803c9c0400: control (read@2048,1024B). Runtime 60 seconds [ 2264.165299][ T2063] block nbd0: Possible stuck request ffff88803c9c0600: control (read@3072,1024B). Runtime 60 seconds [ 2264.515290][T25172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.522608][T25172] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.529803][T25172] bridge_slave_0: entered allmulticast mode [ 2264.536773][ T959] Bluetooth: hci0: command tx timeout [ 2264.547588][T25172] bridge_slave_0: entered promiscuous mode [ 2264.556929][T25172] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.564659][T25172] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.581800][T25172] bridge_slave_1: entered allmulticast mode [ 2264.608609][T25172] bridge_slave_1: entered promiscuous mode [ 2264.696830][T25172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2264.709173][T25172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2264.726597][T25257] netlink: 'syz.0.12213': attribute type 7 has an invalid length. [ 2264.758491][T25172] team0: Port device team_slave_0 added [ 2264.773371][T25172] team0: Port device team_slave_1 added [ 2264.827526][T25172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2264.840200][T25172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2264.893167][T25172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2264.916287][T25269] __nla_validate_parse: 1 callbacks suppressed [ 2264.916307][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12214'. [ 2264.947014][T25269] batman_adv: netdevsim0: Removing interface: batadv_slave_1 [ 2264.973084][T25172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2264.980128][T25172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2265.007031][T25172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2265.040104][T25273] lo speed is unknown, defaulting to 1000 [ 2265.064343][T25273] lo speed is unknown, defaulting to 1000 [ 2265.093156][T25172] hsr_slave_0: entered promiscuous mode [ 2265.100182][T25172] hsr_slave_1: entered promiscuous mode [ 2265.107606][T25172] debugfs: 'hsr0' already exists in 'hsr' [ 2265.113950][T25172] Cannot create hsr debugfs directory [ 2265.260891][T25282] netlink: 'syz.3.12221': attribute type 83 has an invalid length. [ 2265.279613][T25282] netlink: zone id is out of range [ 2265.291056][T25283] netlink: 332 bytes leftover after parsing attributes in process `syz.4.12220'. [ 2265.300731][T25283] netlink: 'syz.4.12220': attribute type 9 has an invalid length. [ 2265.308752][T25282] netlink: zone id is out of range [ 2265.315231][T25282] netlink: zone id is out of range [ 2265.321861][T25283] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12220'. [ 2265.334803][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12221'. [ 2265.344325][T25283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12220'. [ 2265.354391][T25282] netlink: zone id is out of range [ 2265.361923][T25282] netlink: zone id is out of range [ 2265.369310][T25282] netlink: zone id is out of range [ 2265.381220][T25282] netlink: zone id is out of range [ 2265.387817][T25282] netlink: zone id is out of range [ 2265.398046][T25282] netlink: zone id is out of range [ 2265.404097][T25282] netlink: zone id is out of range [ 2265.507283][T25291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.516853][T25291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2265.543236][T25293] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12222'. [ 2265.554695][T25292] netlink: 'syz.4.12223': attribute type 1 has an invalid length. [ 2266.309213][T25324] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12231'. [ 2266.445460][T25172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2266.468579][T25172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2266.495522][T25172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2266.529461][T25172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2266.605828][ T959] Bluetooth: hci0: command tx timeout [ 2266.754408][T25346] netlink: 'syz.3.12238': attribute type 1 has an invalid length. [ 2266.769785][T25172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2266.847437][T25348] bond2: (slave bridge3): making interface the new active one [ 2266.855877][T25348] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 2266.888182][T25172] 8021q: adding VLAN 0 to HW filter on device team0 [ 2266.915457][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12239'. [ 2266.928573][ T3973] IPVS: starting estimator thread 0... [ 2266.994942][T16195] bridge0: port 1(bridge_slave_0) entered blocking state [ 2267.002150][T16195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2267.020814][T25354] IPVS: using max 35 ests per chain, 84000 per kthread [ 2267.045565][T16195] bridge0: port 2(bridge_slave_1) entered blocking state [ 2267.052785][T16195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2267.106602][T25359] geneve3: entered promiscuous mode [ 2267.140750][T25359] geneve3: entered allmulticast mode [ 2267.180533][T16194] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2267.199931][T16194] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2267.261715][T16194] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2267.291973][T25365] nbd: couldn't find device at index 3 [ 2267.311300][T16194] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2267.544146][T25387] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12248'. [ 2267.571833][T25393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12249'. [ 2267.716205][T25172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2267.805041][T25172] veth0_vlan: entered promiscuous mode [ 2267.817026][T25172] veth1_vlan: entered promiscuous mode [ 2267.875716][T25172] veth0_macvtap: entered promiscuous mode [ 2267.887704][T25172] veth1_macvtap: entered promiscuous mode [ 2267.937707][T25172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2267.960955][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 2267.969014][ C1] lec:lec_tx_timeout: lec0 [ 2268.033091][T25172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2268.072213][T16188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.093246][T16188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.148984][T25409] vlan1: entered promiscuous mode [ 2268.155485][T25409] erspan0: entered promiscuous mode [ 2268.214280][T16188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.238957][T16188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.450425][T13197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2268.481698][T13197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2268.563778][T25425] lo speed is unknown, defaulting to 1000 [ 2268.571410][T25425] lo speed is unknown, defaulting to 1000 [ 2268.586470][T16185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2268.597520][T25431] nbd: must specify at least one socket [ 2268.609886][T25431] netlink: 'syz.0.12257': attribute type 3 has an invalid length. [ 2268.623372][T16185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2268.691003][T10453] Bluetooth: hci0: command tx timeout [ 2268.759359][T25443] lo speed is unknown, defaulting to 1000 [ 2268.983254][T25451] bond0: (slave rose0): Error: Device can not be enslaved while up [ 2269.104684][T25459] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 2269.115486][T25459] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 2269.118953][T25443] lo speed is unknown, defaulting to 1000 [ 2269.127034][T25459] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 2270.050975][ T959] Bluetooth: hci4: command 0x0406 tx timeout [ 2273.052303][ T5191] udevd[5191]: worker [22161] /devices/virtual/block/nbd0 is taking a long time [ 2275.115199][T25485] __nla_validate_parse: 6 callbacks suppressed [ 2275.115220][T25485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12263'. [ 2275.225918][T25493] veth1: entered promiscuous mode [ 2275.245723][T25493] veth1: entered allmulticast mode [ 2275.261895][T25493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12267'. [ 2275.283815][T25492] bond_slave_0: entered promiscuous mode [ 2275.290046][T25492] bond_slave_1: entered promiscuous mode [ 2275.295845][T25492] dummy0: entered promiscuous mode [ 2275.331158][T25492] macvlan2: entered promiscuous mode [ 2275.370498][T25492] bond0: entered promiscuous mode [ 2275.382616][T25492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2275.434225][T25492] bond0: left promiscuous mode [ 2275.447244][T10453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2275.457984][T25492] bond_slave_0: left promiscuous mode [ 2275.458789][T10453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2275.463488][T25492] bond_slave_1: left promiscuous mode [ 2275.463580][T25492] dummy0: left promiscuous mode [ 2275.484870][T10453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2275.496709][T10453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2275.507883][T10453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2275.894010][T25504] tipc: Resetting bearer [ 2276.070344][T25528] netlink: 'syz.0.12272': attribute type 11 has an invalid length. [ 2276.078760][T25528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12272'. [ 2276.140440][T31872] lo speed is unknown, defaulting to 1000 [ 2276.151732][T31872] syz0: Port: 1 Link DOWN [ 2276.156231][T31872] lo speed is unknown, defaulting to 1000 [ 2276.201592][T16185] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.227859][T25505] lo speed is unknown, defaulting to 1000 [ 2276.234429][T16188] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.260706][T16188] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.269123][T16188] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.316525][T25533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12275'. [ 2276.326016][T25505] lo speed is unknown, defaulting to 1000 [ 2276.353911][T25533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12275'. [ 2276.366541][T25534] tipc: Started in network mode [ 2276.374010][T25534] tipc: Node identity 7e7861a66b78, cluster identity 4711 [ 2276.382373][T25534] tipc: Enabled bearer , priority 0 [ 2276.399995][T25539] ve: renamed from veth0_vlan [ 2276.431961][T25534] syzkaller0: entered promiscuous mode [ 2276.432806][T25533] netlink: 460 bytes leftover after parsing attributes in process `syz.4.12275'. [ 2276.437475][T25534] syzkaller0: entered allmulticast mode [ 2276.604810][T25534] tipc: Resetting bearer [ 2276.630830][T25531] tipc: Resetting bearer [ 2276.696016][T25531] tipc: Disabling bearer [ 2276.698769][T25560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12282'. [ 2276.761383][T25563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12282'. [ 2276.778060][T25560] netlink: 'syz.3.12282': attribute type 1 has an invalid length. [ 2277.213536][T25505] chnl_net:caif_netlink_parms(): no params data found [ 2277.381642][T25505] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.388869][T25505] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.392420][T25614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12290'. [ 2277.396241][T25505] bridge_slave_0: entered allmulticast mode [ 2277.414148][T25505] bridge_slave_0: entered promiscuous mode [ 2277.424587][T25505] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.460341][T25505] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.477985][T25505] bridge_slave_1: entered allmulticast mode [ 2277.489505][T25505] bridge_slave_1: entered promiscuous mode [ 2277.571075][ T959] Bluetooth: hci1: command tx timeout [ 2277.658789][T25603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12291'. [ 2277.694573][T25505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2277.717756][T25505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2277.814443][T25505] team0: Port device team_slave_0 added [ 2277.862329][T25505] team0: Port device team_slave_1 added [ 2277.898114][T25505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2277.907404][T25505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2277.934478][T25505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2277.947541][T25505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2277.956795][T25505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2277.984873][T25505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2278.021041][T25629] bond1: option packets_per_slave: invalid value (1048582) [ 2278.028497][T25629] bond1: option packets_per_slave: allowed values 0 - 65535 [ 2278.037736][T25629] bond1 (unregistering): Released all slaves [ 2278.108173][T25505] hsr_slave_0: entered promiscuous mode [ 2278.117237][T25505] hsr_slave_1: entered promiscuous mode [ 2278.124131][T25505] debugfs: 'hsr0' already exists in 'hsr' [ 2278.129956][T25505] Cannot create hsr debugfs directory [ 2278.136265][T25628] lo speed is unknown, defaulting to 1000 [ 2278.172111][T25628] lo speed is unknown, defaulting to 1000 [ 2278.793383][T25505] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 2278.831009][T25505] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.855391][T25505] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2278.935178][T25671] netlink: 'syz.3.12307': attribute type 64 has an invalid length. [ 2279.039918][T25667] lo speed is unknown, defaulting to 1000 [ 2279.066348][T25505] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 2279.087994][T25505] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.131045][T25505] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2279.192688][T25667] lo speed is unknown, defaulting to 1000 [ 2279.284652][T25505] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 2279.309865][T25505] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.332562][T25505] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2279.557255][T25675] syzkaller1: entered promiscuous mode [ 2279.563017][T25675] syzkaller1: entered allmulticast mode [ 2279.650867][ T959] Bluetooth: hci1: command tx timeout [ 2279.665110][T25505] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 2279.676647][T25505] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.687068][T25505] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2280.073687][T25709] net_ratelimit: 360 callbacks suppressed [ 2280.073707][T25709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2280.510794][T25733] __nla_validate_parse: 7 callbacks suppressed [ 2280.510814][T25733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12317'. [ 2280.615207][T25739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12321'. [ 2280.641508][T25739] nbd: illegal input index 38656 [ 2280.712901][T25739] netlink: 11 bytes leftover after parsing attributes in process `syz.0.12321'. [ 2280.716800][T25505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2280.769596][T25505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2280.788017][T25505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2280.810028][T25505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2280.874254][T25505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2280.891583][T25505] 8021q: adding VLAN 0 to HW filter on device team0 [ 2280.903671][T16181] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.910810][T16181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2280.925379][T16184] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.932549][T16184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2281.080301][T25505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2281.119244][T25505] veth0_vlan: entered promiscuous mode [ 2281.146404][T25505] veth1_vlan: entered promiscuous mode [ 2281.193151][T25505] veth0_macvtap: entered promiscuous mode [ 2281.205473][T25505] veth1_macvtap: entered promiscuous mode [ 2281.224135][T25505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2281.237610][T25505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2281.251993][T16181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2281.261300][T16181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2281.270120][T16181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2281.279873][T16181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2281.347222][T16190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2281.360715][T16190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2281.397131][T16190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2281.406961][T16190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2281.450349][T25755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2281.466577][T25755] ip6tnl1: entered promiscuous mode [ 2281.472016][T25755] ip6tnl1: entered allmulticast mode [ 2281.720833][ T959] Bluetooth: hci1: command tx timeout [ 2283.327063][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2283.800830][ T959] Bluetooth: hci1: command tx timeout [ 2285.882234][ T2063] block nbd4: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 150 seconds [ 2285.893064][ T2063] block nbd4: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 150 seconds [ 2285.904135][ T2063] block nbd4: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 150 seconds [ 2285.915122][ T2063] block nbd4: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 150 seconds [ 2288.393954][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.405746][T25782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12326'. [ 2288.417072][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.423979][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.430844][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.437671][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.444542][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.451393][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.458237][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.465099][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.471892][T25786] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2288.497465][T25794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12323'. [ 2288.574354][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12323'. [ 2288.599021][T25795] netlink: 348 bytes leftover after parsing attributes in process `syz.1.12323'. [ 2288.611048][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12323'. [ 2288.620232][T25795] netlink: 348 bytes leftover after parsing attributes in process `syz.1.12323'. [ 2288.632473][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12323'. [ 2288.703739][T25802] netlink: 'syz.3.12328': attribute type 1 has an invalid length. [ 2288.713543][T25801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12328'. [ 2288.922991][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 2288.931062][ C1] lec:lec_tx_timeout: lec0 [ 2289.159415][T25802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2289.169998][T25804] batadv0: entered promiscuous mode [ 2289.355297][T25814] lo speed is unknown, defaulting to 1000 [ 2289.379352][T25818] pim6reg: entered allmulticast mode [ 2289.393052][T25814] lo speed is unknown, defaulting to 1000 [ 2289.545830][T25833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12333'. [ 2289.601963][T25833] vlan3: entered promiscuous mode [ 2289.626868][T25833] bridge0: entered promiscuous mode [ 2289.693322][T25833] syzkaller0: entered promiscuous mode [ 2289.709312][T25833] syzkaller0: entered allmulticast mode [ 2290.252071][T25869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12338'. [ 2290.330652][T25878] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 2290.435580][T25869] nbd: socks must be embedded in a SOCK_ITEM attr [ 2290.449876][T25880] nbd: nbd64 already in use [ 2290.464618][T21692] block nbd64: NBD_DISCONNECT [ 2290.766551][T25895] syzkaller0: entered promiscuous mode [ 2290.785382][T25895] syzkaller0: entered allmulticast mode [ 2290.796439][T21692] udevd[21692]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2290.941754][T25846] lo speed is unknown, defaulting to 1000 [ 2290.977795][T25898] FAULT_INJECTION: forcing a failure. [ 2290.977795][T25898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2290.994231][T25898] CPU: 1 UID: 0 PID: 25898 Comm: syz.1.12344 Not tainted syzkaller #0 PREEMPT(full) [ 2290.994257][T25898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2290.994269][T25898] Call Trace: [ 2290.994278][T25898] [ 2290.994286][T25898] dump_stack_lvl+0xe8/0x150 [ 2290.994321][T25898] should_fail_ex+0x412/0x560 [ 2290.994351][T25898] _copy_to_user+0x31/0xb0 [ 2290.994387][T25898] simple_read_from_buffer+0xe1/0x170 [ 2290.994420][T25898] proc_fail_nth_read+0x1bb/0x230 [ 2290.994499][T25898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2290.994526][T25898] ? rw_verify_area+0x2a6/0x4d0 [ 2290.994545][T25898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2290.994570][T25898] vfs_read+0x20c/0xa70 [ 2290.994588][T25898] ? fdget_pos+0x246/0x320 [ 2290.994617][T25898] ? __pfx___mutex_lock+0x10/0x10 [ 2290.994647][T25898] ? __pfx_vfs_read+0x10/0x10 [ 2290.994667][T25898] ? __fget_files+0x2a/0x420 [ 2290.994695][T25898] ? __fget_files+0x3a0/0x420 [ 2290.994718][T25898] ? __fget_files+0x2a/0x420 [ 2290.994750][T25898] ksys_read+0x150/0x270 [ 2290.994772][T25898] ? __pfx_ksys_read+0x10/0x10 [ 2290.994801][T25898] do_syscall_64+0x14d/0xf80 [ 2290.994825][T25898] ? trace_irq_disable+0x3b/0x150 [ 2290.994850][T25898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.994869][T25898] ? clear_bhb_loop+0x40/0x90 [ 2290.994891][T25898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.994909][T25898] RIP: 0033:0x7fd164b5cfce [ 2290.994927][T25898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2290.994943][T25898] RSP: 002b:00007fd165a0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2290.994963][T25898] RAX: ffffffffffffffda RBX: 00007fd165a0e6c0 RCX: 00007fd164b5cfce [ 2290.994976][T25898] RDX: 000000000000000f RSI: 00007fd165a0e0a0 RDI: 0000000000000006 [ 2290.994988][T25898] RBP: 00007fd165a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 2290.994999][T25898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2290.995010][T25898] R13: 00007fd164e16038 R14: 00007fd164e15fa0 R15: 00007ffc80e88c08 [ 2290.995039][T25898] [ 2291.395110][T25903] netlink: 'syz.0.12346': attribute type 1 has an invalid length. [ 2293.156746][T25881] lo speed is unknown, defaulting to 1000 [ 2293.158130][T25846] lo speed is unknown, defaulting to 1000 [ 2293.217832][T25903] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2293.377823][T25927] bond7: entered promiscuous mode [ 2293.392106][T25927] bond7: entered allmulticast mode [ 2293.397590][T25927] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2293.421569][T25931] netlink: 'syz.1.12353': attribute type 3 has an invalid length. [ 2293.525747][T25934] tipc: Enabled bearer , priority 0 [ 2293.549791][T25934] syzkaller0: entered promiscuous mode [ 2293.597083][T25934] syzkaller0: entered allmulticast mode [ 2293.681682][T25947] __nla_validate_parse: 3 callbacks suppressed [ 2293.681702][T25947] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12357'. [ 2293.726268][T25934] tipc: Resetting bearer [ 2293.750914][T25932] tipc: Resetting bearer [ 2293.901755][T25932] tipc: Disabling bearer [ 2293.928629][T25947] bridge0: port 2(bridge_slave_1) entered disabled state [ 2293.936350][T25947] bridge0: port 1(bridge_slave_0) entered disabled state [ 2293.983318][T25881] lo speed is unknown, defaulting to 1000 [ 2294.018647][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12360'. [ 2294.030795][T25957] sit0: entered promiscuous mode [ 2294.233711][ T2063] block nbd0: Possible stuck request ffff88803c9c0000: control (read@0,1024B). Runtime 90 seconds [ 2294.245668][ T2063] block nbd0: Possible stuck request ffff88803c9c0200: control (read@1024,1024B). Runtime 90 seconds [ 2294.257039][ T2063] block nbd0: Possible stuck request ffff88803c9c0400: control (read@2048,1024B). Runtime 90 seconds [ 2294.269517][ T2063] block nbd0: Possible stuck request ffff88803c9c0600: control (read@3072,1024B). Runtime 90 seconds [ 2294.525961][T25977] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 2294.612596][T25988] netlink: 388 bytes leftover after parsing attributes in process `syz.0.12366'. [ 2294.612760][T25977] bond8 (unregistering): Released all slaves [ 2294.965223][T25993] lo speed is unknown, defaulting to 1000 [ 2294.991094][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12370'. [ 2295.019533][T26010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12371'. [ 2295.048880][T25993] lo speed is unknown, defaulting to 1000 [ 2295.055676][T26010] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12371'. [ 2295.212259][T26017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12374'. [ 2295.343654][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12373'. [ 2295.388597][T26017] macvtap1: entered promiscuous mode [ 2295.394468][T26017] macvtap1: entered allmulticast mode [ 2295.399939][T26017] batadv0: entered allmulticast mode [ 2295.406107][T26017] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 2295.545203][T26025] bond1: Removing last arp target with arp_interval on [ 2295.628246][T26031] netlink: 204 bytes leftover after parsing attributes in process `syz.4.12378'. [ 2295.706304][T26031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12378'. [ 2296.101587][T26039] tc_dump_action: action bad kind [ 2296.284198][T26042] netlink: 'syz.1.12381': attribute type 51 has an invalid length. [ 2296.334042][T26042] ip6gre1: entered promiscuous mode [ 2296.350169][T26042] ip6gre1: entered allmulticast mode [ 2296.464309][T26052] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2296.555739][T26044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2296.579214][T26044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2296.657109][T26051] lo speed is unknown, defaulting to 1000 [ 2296.670047][T26051] lo speed is unknown, defaulting to 1000 [ 2297.833573][T26116] veth9: entered promiscuous mode [ 2297.944283][T26128] netlink: 'syz.1.12405': attribute type 5 has an invalid length. [ 2298.249802][T26118] lo speed is unknown, defaulting to 1000 [ 2298.287253][T26118] lo speed is unknown, defaulting to 1000 [ 2298.565118][T26147] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2299.046531][T26163] netlink: 'syz.3.12412': attribute type 8 has an invalid length. [ 2299.092280][T26164] lo speed is unknown, defaulting to 1000 [ 2299.110014][T26159] ipt_ECN: cannot use operation on non-tcp rule [ 2299.124489][T26159] bond0: left promiscuous mode [ 2299.140064][T26159] bond0: left allmulticast mode [ 2299.190147][T26159] lo speed is unknown, defaulting to 1000 [ 2299.216244][T26164] lo speed is unknown, defaulting to 1000 [ 2299.494715][T26159] lo speed is unknown, defaulting to 1000 [ 2305.072187][T26209] __nla_validate_parse: 10 callbacks suppressed [ 2305.072207][T26209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12418'. [ 2305.369849][T26229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12427'. [ 2305.423335][T26240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12429'. [ 2305.433701][T26236] dvmrp0: entered allmulticast mode [ 2305.476357][T26229] ip6gre1: entered promiscuous mode [ 2305.487712][T26229] ip6gre1: entered allmulticast mode [ 2305.542320][T26246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12430'. [ 2305.613360][T26229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2305.631842][T26229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2305.651922][T26249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12431'. [ 2305.751118][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12432'. [ 2305.760271][T26251] netlink: 'syz.4.12432': attribute type 30 has an invalid length. [ 2305.814368][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12432'. [ 2305.818898][T16184] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2305.832106][T26251] netlink: 'syz.4.12432': attribute type 30 has an invalid length. [ 2305.843742][T16184] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2305.879407][T16184] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2305.917663][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12435'. [ 2305.929900][T16194] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2305.982774][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12435'. [ 2306.273605][T26283] lo speed is unknown, defaulting to 1000 [ 2306.303678][T26283] lo speed is unknown, defaulting to 1000 [ 2306.329011][T26297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12440'. [ 2306.349512][T26287] netlink: 'syz.0.12441': attribute type 13 has an invalid length. [ 2307.284672][T26331] bond1: option miimon: invalid value (18446744073709551607) [ 2307.292476][T26331] bond1: option miimon: allowed values 0 - 2147483647 [ 2307.309311][T26331] bond1 (unregistering): Released all slaves [ 2307.759143][T26367] sock: sock_timestamping_bind_phc: sock not bind to device [ 2307.788526][T26367] netlink: 'syz.1.12455': attribute type 1 has an invalid length. [ 2307.916162][T26367] macvtap1: left promiscuous mode [ 2307.934107][T26367] batadv0: left promiscuous mode [ 2307.948484][T26367] ip6gre1: left promiscuous mode [ 2308.166246][T26382] IPVS: length: 95 != 8 [ 2308.826875][T26429] netlink: 'syz.0.12473': attribute type 1 has an invalid length. [ 2308.869136][T26429] netlink: 'syz.0.12473': attribute type 1 has an invalid length. [ 2308.889405][T26429] netlink: 'syz.0.12473': attribute type 8 has an invalid length. [ 2308.937505][T10453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2308.952657][T10453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2308.978037][T10453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2308.999911][T10453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2309.009107][T10453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2309.070464][T26440] lo speed is unknown, defaulting to 1000 [ 2309.078839][T26437] lo speed is unknown, defaulting to 1000 [ 2309.090281][T26440] lo speed is unknown, defaulting to 1000 [ 2309.139147][T26445] tipc: Enabled bearer , priority 0 [ 2309.309171][T26445] syzkaller0: entered promiscuous mode [ 2309.315216][T26445] syzkaller0: entered allmulticast mode [ 2309.333660][T26445] tipc: Resetting bearer [ 2309.423871][T26448] tipc: Resetting bearer [ 2311.084708][ T959] Bluetooth: hci3: command tx timeout [ 2311.495639][T26448] tipc: Disabling bearer [ 2311.507813][T26437] lo speed is unknown, defaulting to 1000 [ 2311.538287][T16195] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2311.570778][ T3973] tipc: Node number set to 1233189779 [ 2311.615616][T16195] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2311.661870][T26475] __nla_validate_parse: 8 callbacks suppressed [ 2311.661891][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12483'. [ 2311.666331][T26477] netlink: 'syz.1.12484': attribute type 10 has an invalid length. [ 2311.668088][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12483'. [ 2311.734526][T26477] team0: Failed to send options change via netlink (err -105) [ 2311.735750][T26479] netlink: 'syz.1.12484': attribute type 10 has an invalid length. [ 2311.752663][T26477] team0: Port device dummy0 added [ 2311.764153][T16195] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2311.844987][T26479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2311.875218][T26479] team0: Failed to send options change via netlink (err -105) [ 2311.882966][T26479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2311.892822][T26479] team0: Port device dummy0 removed [ 2311.909905][T26479] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2311.961643][T16195] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2311.971556][T26475] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12483'. [ 2312.001603][T26482] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12483'. [ 2312.019592][T26486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12486'. [ 2312.026450][T26483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12483'. [ 2312.424353][T26512] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 2312.443231][T26512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12492'. [ 2312.477002][T16195] bridge_slave_1: left allmulticast mode [ 2312.483480][T16195] bridge_slave_1: left promiscuous mode [ 2312.489401][T16195] bridge0: port 2(bridge_slave_1) entered disabled state [ 2312.498796][T16195] bridge_slave_0: left allmulticast mode [ 2312.505335][T16195] bridge_slave_0: left promiscuous mode [ 2312.511253][T16195] bridge0: port 1(bridge_slave_0) entered disabled state [ 2312.547964][T16195] tipc: Disabling bearer [ 2312.675313][T16195] bond4 (unregistering): (slave gretap1): Releasing active interface [ 2312.883660][T26520] netlink: 165 bytes leftover after parsing attributes in process `syz.2.12494'. [ 2313.161376][ T959] Bluetooth: hci3: command tx timeout [ 2313.197151][T16195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2313.208025][T16195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2313.231789][T16195] bond0 (unregistering): Released all slaves [ 2313.244640][T16195] bond1 (unregistering): Released all slaves [ 2313.267035][T16195] bond2 (unregistering): Released all slaves [ 2313.280358][T16195] bond3 (unregistering): Released all slaves [ 2313.300433][T16195] bond4 (unregistering): Released all slaves [ 2313.316298][T16195] bond5 (unregistering): Released all slaves [ 2313.332612][T16195] bond6 (unregistering): (slave batadv0): Releasing active interface [ 2313.341738][T16195] bond6 (unregistering): Released all slaves [ 2313.363258][T16195] bond7 (unregistering): Released all slaves [ 2313.614459][T16195] tipc: Left network mode [ 2313.630432][T26437] chnl_net:caif_netlink_parms(): no params data found [ 2313.773029][T26550] veth1_to_hsr: entered allmulticast mode [ 2313.848777][T26562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12503'. [ 2313.985846][T26562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2313.999864][T26563] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2314.020096][T26563] team0: Port device macvlan2 added [ 2314.072099][T26573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12505'. [ 2314.430782][T26437] bridge0: port 1(bridge_slave_0) entered blocking state [ 2314.448427][T26437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2314.473457][T26437] bridge_slave_0: entered allmulticast mode [ 2314.502479][T26437] bridge_slave_0: entered promiscuous mode [ 2314.524456][T26437] bridge0: port 2(bridge_slave_1) entered blocking state [ 2314.542000][T26437] bridge0: port 2(bridge_slave_1) entered disabled state [ 2314.574288][T26437] bridge_slave_1: entered allmulticast mode [ 2314.618246][T26437] bridge_slave_1: entered promiscuous mode [ 2314.727512][T26615] tipc: Enabling of bearer rejected, failed to enable media [ 2314.842016][T26437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2314.898540][T26627] tc_dump_action: action bad kind [ 2314.994713][T26437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2315.118059][T26437] team0: Port device team_slave_0 added [ 2315.140265][T26437] team0: Port device team_slave_1 added [ 2315.198126][T26437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2315.220736][T26437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2315.251579][ T959] Bluetooth: hci3: command tx timeout [ 2315.264489][T26437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2315.278250][T26437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2315.286579][T26437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2315.314679][T26437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2315.404635][T26437] hsr_slave_0: entered promiscuous mode [ 2315.420183][T26437] hsr_slave_1: entered promiscuous mode [ 2315.429964][T26437] debugfs: 'hsr0' already exists in 'hsr' [ 2315.436242][T26437] Cannot create hsr debugfs directory [ 2315.461596][T26621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2315.467654][T26621] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2315.583649][T26621] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2315.599984][T26621] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2315.763506][T26661] netlink: 'syz.3.12525': attribute type 3 has an invalid length. [ 2315.799795][T26661] nbd: couldn't find device at index 3 [ 2315.866439][T26661] net_ratelimit: 3322 callbacks suppressed [ 2315.866451][T26661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2315.961115][ T2063] block nbd4: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 180 seconds [ 2315.971924][ T2063] block nbd4: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 180 seconds [ 2315.983891][ T2063] block nbd4: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 180 seconds [ 2315.994974][ T2063] block nbd4: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 180 seconds [ 2316.024295][T26621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2316.054610][T26621] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2316.315732][T26621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2316.347013][T26621] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2316.713258][T26706] sctp: [Deprecated]: syz.2.12531 (pid 26706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2316.713258][T26706] Use struct sctp_sack_info instead [ 2317.052021][T26694] lo speed is unknown, defaulting to 1000 [ 2317.183000][T26694] lo speed is unknown, defaulting to 1000 [ 2317.222779][T26731] __nla_validate_parse: 5 callbacks suppressed [ 2317.222799][T26731] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12536'. [ 2317.434170][T26740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12539'. [ 2317.465825][T26741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12539'. [ 2317.485087][T26437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2317.560012][T26744] bond2: Removing last ns target with arp_interval on [ 2317.621695][T26437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2317.693059][T26750] bond3: Removing last ns target with arp_interval on [ 2317.725524][T26754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12541'. [ 2317.758744][T26437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2317.824407][T26762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12542'. [ 2317.849398][T26437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2317.986704][T26762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12542'. [ 2318.071549][T16195] hsr_slave_0: left promiscuous mode [ 2318.078512][T16195] hsr_slave_1: left promiscuous mode [ 2318.085656][T16195] batman_adv: netdevsim0: Removing interface: batadv_slave_0 [ 2318.211461][T16195] team0 (unregistering): Port device hsr0 removed [ 2318.227308][T26783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12546'. [ 2318.251314][T16195] team0 (unregistering): Port device team_slave_1 removed [ 2318.382959][T16185] smc: removing ib device syz0 [ 2318.698464][T26779] lo speed is unknown, defaulting to 1000 [ 2321.227379][T26810] bridge_slave_1: left allmulticast mode [ 2321.236205][T26810] bridge_slave_1: left promiscuous mode [ 2321.244497][T26810] bridge0: port 2(bridge_slave_1) entered disabled state [ 2321.275978][T26810] bridge_slave_0: left allmulticast mode [ 2321.282279][T26810] bridge_slave_0: left promiscuous mode [ 2321.288017][T26810] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.523831][T16195] IPVS: stop unused estimator thread 0... [ 2321.703280][T26437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2321.757950][T26437] 8021q: adding VLAN 0 to HW filter on device team0 [ 2321.806019][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 2321.813209][T16190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2321.895641][T16184] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.902827][T16184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2321.920777][T26827] netlink: 'syz.2.12557': attribute type 2 has an invalid length. [ 2322.218802][T26437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2322.483672][T26437] veth0_vlan: entered promiscuous mode [ 2322.498321][T26437] veth1_vlan: entered promiscuous mode [ 2322.540100][T26437] veth0_macvtap: entered promiscuous mode [ 2322.553069][T26437] veth1_macvtap: entered promiscuous mode [ 2322.577521][T26437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2322.594381][T26437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2322.609859][T16184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.626940][T16184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.636932][T16184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.646578][T16184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.821738][T16195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2322.829603][T16195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2322.878679][T16185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2322.887745][T16185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2324.280860][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2324.290986][ T2063] block nbd0: Possible stuck request ffff88803c9c0000: control (read@0,1024B). Runtime 120 seconds [ 2324.301781][ T2063] block nbd0: Possible stuck request ffff88803c9c0200: control (read@1024,1024B). Runtime 120 seconds [ 2324.312815][ T2063] block nbd0: Possible stuck request ffff88803c9c0400: control (read@2048,1024B). Runtime 120 seconds [ 2324.325034][ T2063] block nbd0: Possible stuck request ffff88803c9c0600: control (read@3072,1024B). Runtime 120 seconds [ 2325.866346][ T5191] udevd[5191]: worker [21452] /devices/virtual/block/nbd4 timeout; kill it [ 2325.876134][ T5191] udevd[5191]: seq 65610 '/devices/virtual/block/nbd4' killed [ 2326.646836][ T6672] lec:lec_start_xmit: lec0:No lecd attached [ 2331.960754][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 2331.968783][ C1] lec:lec_tx_timeout: lec0 [ 2334.616841][T26921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12565'. [ 2334.756766][T26935] netlink: 'syz.2.12569': attribute type 39 has an invalid length. [ 2334.945779][T26947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12574'. [ 2334.998229][T26952] ip6_vti0: entered promiscuous mode [ 2335.009198][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12575'. [ 2335.064501][T26956] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2335.101233][T26959] vlan3: entered promiscuous mode [ 2335.109395][T26959] team0: entered promiscuous mode [ 2335.123653][T26959] team_slave_0: entered promiscuous mode [ 2335.130030][T26959] team_slave_1: entered promiscuous mode [ 2335.137689][T26959] macvlan2: entered promiscuous mode [ 2335.145738][T26959] bond2: entered promiscuous mode [ 2335.336373][T26981] netlink: 'syz.0.12582': attribute type 21 has an invalid length. [ 2335.386465][T26981] netlink: 'syz.0.12582': attribute type 22 has an invalid length. [ 2335.402854][T26981] netlink: 'syz.0.12582': attribute type 23 has an invalid length. [ 2335.419696][T26981] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12582'. [ 2335.513957][T26993] macvtap0: entered promiscuous mode [ 2335.519680][T26992] tipc: Enabled bearer , priority 0 [ 2335.530221][T26992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12588'. [ 2335.561898][T26992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12588'. [ 2335.571930][T26992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12588'. [ 2335.584169][T26992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12588'. [ 2335.608228][T26995] tipc: Disabling bearer [ 2335.660923][T27004] macvtap0: left promiscuous mode [ 2335.964361][T27025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12596'. [ 2336.040086][T27026] IPv6: Can't replace route, no match found [ 2336.050978][T27026] IPv6: Can't replace route, no match found [ 2336.125797][T27022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2336.805174][T27065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12609'. [ 2336.818039][T27060] syzkaller0: entered promiscuous mode [ 2336.823632][T27060] syzkaller0: entered allmulticast mode [ 2336.831798][T27060] 8021q: VLANs not supported on sit0 [ 2337.075183][T24340] IPVS: starting estimator thread 0... [ 2337.180653][T27080] IPVS: using max 35 ests per chain, 84000 per kthread [ 2337.288001][T27095] netlink: 'syz.2.12617': attribute type 2 has an invalid length. [ 2337.357183][T27095] !: entered promiscuous mode [ 2337.568421][T27114] veth0_to_team: entered promiscuous mode [ 2337.601748][T27114] veth0_to_team: entered allmulticast mode [ 2337.612585][T24340] IPVS: starting estimator thread 0... [ 2337.703574][T27117] IPVS: using max 29 ests per chain, 69600 per kthread [ 2337.810855][T27119] lo speed is unknown, defaulting to 1000 [ 2337.940479][T27128] bridge0: entered promiscuous mode [ 2337.987554][T27127] syzkaller0: entered promiscuous mode [ 2338.000780][T27127] syzkaller0: entered allmulticast mode [ 2338.033769][T27132] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2338.270212][T27146] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2338.300815][T27146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2338.311171][T27146] netlink: 'syz.1.12631': attribute type 2 has an invalid length. [ 2338.634494][T27164] atomic_op ffff888059b46998 conn xmit_atomic 0000000000000000 [ 2338.738013][T27165] lo speed is unknown, defaulting to 1000 [ 2338.987157][T27184] lo speed is unknown, defaulting to 1000 [ 2339.169623][T27150] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2339.235855][T27185] lo speed is unknown, defaulting to 1000 [ 2339.254991][T27199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2339.289690][T27200] netlink: 'syz.4.12645': attribute type 4 has an invalid length. [ 2339.304131][T27200] netlink: 'syz.4.12645': attribute type 4 has an invalid length. [ 2339.366152][T27206] netlink: 'syz.3.12648': attribute type 39 has an invalid length. [ 2339.430220][T27200] siw: device registration error -23 [ 2339.818165][T27223] __nla_validate_parse: 7 callbacks suppressed [ 2339.818183][T27223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12654'. [ 2339.868347][T27226] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2339.921337][T27237] netlink: 'syz.1.12657': attribute type 27 has an invalid length. [ 2339.984857][T27229] netlink: 'syz.0.12655': attribute type 11 has an invalid length. [ 2340.082693][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.126072][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.150356][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.221714][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.266246][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.297006][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.333163][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.372463][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.415486][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.468754][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.544513][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.574604][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.609111][T27237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2340.616856][T27237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2340.622212][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.673309][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.699874][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.731064][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.762633][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.797852][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.824124][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.836140][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.849298][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.861855][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.873796][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.886020][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.898292][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.910302][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.930836][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.942889][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.955064][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2340.982633][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2341.003586][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2341.025933][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2341.052350][T27247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2341.108695][T27237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2341.289535][T27263] netlink: 'syz.2.12660': attribute type 2 has an invalid length. [ 2341.297810][T27263] netlink: 'syz.2.12660': attribute type 11 has an invalid length. [ 2341.308778][T27263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12660'. [ 2341.341404][T27265] netlink: 424 bytes leftover after parsing attributes in process `syz.2.12660'. [ 2341.352075][T27265] netlink: 'syz.2.12660': attribute type 1 has an invalid length. [ 2341.536148][T27237] batadv0: left allmulticast mode [ 2341.553011][T27237] macvtap1: left allmulticast mode [ 2341.568371][T27237] ip6gre1: left allmulticast mode [ 2341.595256][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12663'. [ 2341.606314][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12663'. [ 2341.649638][T16185] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.660287][T13197] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.711130][T27277] bond1: option broadcast_neighbor: invalid value (30) [ 2341.727509][T27277] bond1 (unregistering): Released all slaves [ 2341.753728][ T30] audit: type=1107 audit(1773634347.438:32): pid=27283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2341.793480][T27278] bond1: option broadcast_neighbor: invalid value (30) [ 2341.816220][T27278] bond1 (unregistering): Released all slaves [ 2341.848139][T13197] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.857684][T13197] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.876758][T27281] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2344.766668][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2345.402234][ T3968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2346.060763][ T2063] block nbd4: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 210 seconds [ 2346.071613][ T2063] block nbd4: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 210 seconds [ 2346.082785][ T2063] block nbd4: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 210 seconds [ 2346.093857][ T2063] block nbd4: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 210 seconds [ 2347.011944][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12669'. [ 2347.023525][T27319] xt_bpf: check failed: parse error [ 2347.029030][T27322] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12671'. [ 2347.044163][T27312] netlink: 'syz.1.12669': attribute type 1 has an invalid length. [ 2347.059774][T27322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2347.075297][T27322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2347.089588][T27322] bond0 (unregistering): Released all slaves [ 2347.170009][T27312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2347.395792][T27326] bond1: (slave veth5): Enslaving as an active interface with a down link [ 2347.405565][T27322] ip6tnl0: Caught tx_queue_len zero misconfig [ 2347.429458][T27312] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2347.447210][T27312] bond1: (slave batadv1): making interface the new active one [ 2347.504289][T27312] batadv1: entered promiscuous mode [ 2347.510378][T27312] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 2347.946695][T27354] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12677'. [ 2348.277547][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12684'. [ 2348.288744][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12686'. [ 2348.447652][T27385] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2348.545590][T27391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12688'. [ 2348.569596][T27397] netlink: 'syz.4.12691': attribute type 3 has an invalid length. [ 2348.742800][T27416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12693'. [ 2348.765151][T27415] bridge1: entered promiscuous mode [ 2348.772373][T27415] bridge1: entered allmulticast mode [ 2348.783309][T27416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12693'. [ 2348.801020][T27415] team0: Port device bridge1 added [ 2348.953342][T27425] mac80211_hwsim hwsim160 syzkaller0: entered promiscuous mode [ 2348.961734][T27425] mac80211_hwsim hwsim160 syzkaller0: entered allmulticast mode [ 2349.083654][T27444] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 2349.132829][T27441] netlink: 'syz.4.12702': attribute type 6 has an invalid length. [ 2349.152266][T27444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12704'. [ 2349.190111][T27451] syzkaller0: entered promiscuous mode [ 2349.213275][T27451] syzkaller0: entered allmulticast mode [ 2349.286403][T27451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12706'. [ 2349.329910][T27451] simple: basic_1 [ 2349.685733][T27486] netlink: 'syz.0.12717': attribute type 2 has an invalid length. [ 2349.721930][T27487] netlink: 'syz.0.12717': attribute type 2 has an invalid length. [ 2349.820460][T27495] sctp: [Deprecated]: syz.2.12720 (pid 27495) Use of int in max_burst socket option. [ 2349.820460][T27495] Use struct sctp_assoc_value instead [ 2349.947245][T24340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2349.960749][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 2349.968842][ C1] lec:lec_tx_timeout: lec0 [ 2349.983467][ T30] audit: type=1804 audit(1773634355.668:33): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.12723" name="/newroot/237/cgroup.controllers" dev="tmpfs" ino=1233 res=1 errno=0 [ 2350.026048][T27508] bridge2: entered promiscuous mode [ 2350.031544][T27508] bridge2: entered allmulticast mode [ 2350.059150][ T30] audit: type=1800 audit(1773634355.668:34): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12723" name="cgroup.controllers" dev="tmpfs" ino=1233 res=0 errno=0 [ 2350.132285][ T30] audit: type=1800 audit(1773634355.668:35): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12723" name="cgroup.controllers" dev="tmpfs" ino=1233 res=0 errno=0 [ 2350.198388][T27517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2350.295779][T27518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2350.443049][T27533] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2350.658955][T27554] netlink: 'syz.2.12734': attribute type 12 has an invalid length. [ 2350.728996][T27563] tipc: Failed to remove unknown binding: 66,0,0/0:729276920/729276922 [ 2350.738295][T27563] tipc: Failed to remove unknown binding: 66,0,0/0:729276920/729276921 [ 2350.861780][T27568] dummy0: entered promiscuous mode [ 2350.900088][T27558] tipc: Failed to remove unknown binding: 66,0,0/0:729276920/729276922 [ 2350.925960][T27558] tipc: Failed to remove unknown binding: 66,0,0/0:729276920/729276921 [ 2351.145782][T27583] bond0: (slave dummy0): Releasing backup interface [ 2351.163642][T16185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2351.229008][T27583] bridge_slave_0: left allmulticast mode [ 2351.258734][T27583] bridge_slave_0: left promiscuous mode [ 2351.299133][T27583] bridge0: port 1(bridge_slave_0) entered disabled state [ 2351.333978][T27583] bridge_slave_1: left allmulticast mode [ 2351.348757][T27583] bridge_slave_1: left promiscuous mode [ 2351.367652][T27583] bridge0: port 2(bridge_slave_1) entered disabled state [ 2351.388500][T27583] bond0: (slave bond_slave_0): Releasing backup interface [ 2351.414632][T27583] bond0: (slave bond_slave_1): Releasing backup interface [ 2351.436159][T27583] team0: Port device team_slave_0 removed [ 2351.457836][T27583] team0: Port device team_slave_1 removed [ 2351.464446][T27583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2351.472983][T27583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2351.481705][T27583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2351.489112][T27583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2351.498771][T27583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2351.523981][T27567] dummy0: left promiscuous mode [ 2351.692913][T27614] sch_fq: defrate 4294967293 ignored. [ 2351.762506][T27622] netlink: 'syz.3.12750': attribute type 13 has an invalid length. [ 2351.770861][T27622] netlink: 'syz.3.12750': attribute type 17 has an invalid length. [ 2351.879833][T27622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2352.060015][T27641] __nla_validate_parse: 8 callbacks suppressed [ 2352.060035][T27641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12759'. [ 2352.253480][T27659] netlink: 'syz.0.12762': attribute type 1 has an invalid length. [ 2352.518591][T27679] netlink: 'syz.1.12765': attribute type 1 has an invalid length. [ 2352.529036][T27680] netlink: 'syz.1.12765': attribute type 1 has an invalid length. [ 2352.599625][T27684] bond2: entered promiscuous mode [ 2352.614902][T27686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12767'. [ 2352.628503][T27684] bond2: entered allmulticast mode [ 2352.639243][T27684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2352.674824][T27680] bridge1: entered promiscuous mode [ 2352.680181][T27680] bridge1: entered allmulticast mode [ 2352.692798][T27680] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 2352.710714][T13197] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2352.724423][T27694] netlink: 'syz.0.12768': attribute type 3 has an invalid length. [ 2352.746303][T27694] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12768'. [ 2352.770101][T27679] bridge2: entered promiscuous mode [ 2352.776322][T27679] bridge2: entered allmulticast mode [ 2352.798230][T27679] bond2: (slave bridge2): Enslaving as a backup interface with a down link [ 2352.842018][T13197] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2352.895693][T27684] bridge3: entered promiscuous mode [ 2352.904069][T27684] bridge3: entered allmulticast mode [ 2352.909992][T27684] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 2352.995154][T27708] netlink: 566 bytes leftover after parsing attributes in process `syz.3.12771'. [ 2353.170857][T27719] tipc: Started in network mode [ 2353.183508][T27719] tipc: Node identity e6d6c7d410e8, cluster identity 4711 [ 2353.191593][T27722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12777'. [ 2353.199473][T27719] tipc: Enabled bearer , priority 0 [ 2353.219599][T27719] syzkaller0: entered promiscuous mode [ 2353.231262][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12775'. [ 2353.260759][T27719] syzkaller0: entered allmulticast mode [ 2353.490998][T27742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12780'. [ 2353.592263][T27735] tipc: Resetting bearer [ 2353.609848][T27746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12780'. [ 2353.721942][ T3973] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2354.361306][ T2063] block nbd0: Possible stuck request ffff88803c9c0000: control (read@0,1024B). Runtime 150 seconds [ 2354.372383][ T2063] block nbd0: Possible stuck request ffff88803c9c0200: control (read@1024,1024B). Runtime 150 seconds [ 2354.383611][ T2063] block nbd0: Possible stuck request ffff88803c9c0400: control (read@2048,1024B). Runtime 150 seconds [ 2354.394926][ T2063] block nbd0: Possible stuck request ffff88803c9c0600: control (read@3072,1024B). Runtime 150 seconds [ 2356.166952][T27733] lo speed is unknown, defaulting to 1000 [ 2356.178021][T27718] tipc: Resetting bearer [ 2356.211305][T27718] tipc: Disabling bearer [ 2356.232121][T27748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12782'. [ 2356.241893][T27748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2356.258929][ T3973] tipc: Node number set to 4131309524 [ 2356.283958][T16195] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2356.471507][T27764] netlink: 'syz.0.12786': attribute type 1 has an invalid length. [ 2356.563275][T27764] team0: Port device gtp0 added [ 2357.193209][T27798] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12796'. [ 2358.191385][T27821] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 2358.200132][T27821] syzkaller0: entered promiscuous mode [ 2358.208165][T27821] syzkaller0: entered allmulticast mode [ 2358.768491][T27838] sctp: [Deprecated]: syz.3.12805 (pid 27838) Use of int in max_burst socket option. [ 2358.768491][T27838] Use struct sctp_assoc_value instead [ 2358.871428][T27837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12804'. [ 2358.882627][T13197] batadv1: left promiscuous mode [ 2359.252211][T27847] netlink: 'syz.2.12808': attribute type 1 has an invalid length. [ 2359.262775][T27847] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12808'. [ 2359.286876][T27847] netlink: 658 bytes leftover after parsing attributes in process `syz.2.12808'. [ 2359.298448][T27847] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12808'. [ 2359.483403][ T3973] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2360.135241][T16181] dvmrp0: left allmulticast mode [ 2360.304006][T16181] geneve1 (unregistering): left allmulticast mode [ 2360.310450][T16181] geneve1 (unregistering): left promiscuous mode [ 2360.714200][T16181] bond0 (unregistering): left allmulticast mode [ 2360.720469][T16181] bond0 (unregistering): left promiscuous mode [ 2360.732060][T16181] bond0 (unregistering): Released all slaves [ 2360.742191][T16181] bond1 (unregistering): Released all slaves [ 2360.754386][T16181] bond2 (unregistering): Released all slaves [ 2360.769924][T16181] bond3 (unregistering): Released all slaves [ 2360.788529][T16181] bond4 (unregistering): Released all slaves [ 2360.801203][T16181] bond5 (unregistering): Released all slaves [ 2360.816411][T16181] bond6 (unregistering): Released all slaves [ 2360.832925][T16181] bond7 (unregistering): Released all slaves [ 2360.848005][T16181] bond8 (unregistering): Released all slaves [ 2360.864694][T16181] bond9 (unregistering): Released all slaves [ 2360.881131][T16181] bond10 (unregistering): Released all slaves [ 2360.895285][T16181] bond11 (unregistering): Released all slaves [ 2360.913368][T16181] bond12 (unregistering): Released all slaves [ 2360.927394][T16181] bond13 (unregistering): Released all slaves [ 2360.939307][T16181] bond14 (unregistering): Released all slaves [ 2361.129570][T16181] : left promiscuous mode [ 2361.171875][T16181] hmac(sha224: left promiscuous mode [ 2361.232833][T16181] tipc: Disabling bearer [ 2361.238275][T16181] tipc: Left network mode [ 2362.051382][T13197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2364.933360][T27878] netlink: 'syz.3.12812': attribute type 16 has an invalid length. [ 2364.941510][T27878] netlink: 'syz.3.12812': attribute type 17 has an invalid length. [ 2364.986875][T27878] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.994173][T27878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2365.029635][T27878] bridge0: port 2(bridge_slave_1) entered blocking state [ 2365.036916][T27878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2365.116745][T27884] xt_CT: No such helper "snmp_trap" [ 2365.242632][T16190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2365.352396][T27873] syzkaller1: entered promiscuous mode [ 2365.360286][T27873] syzkaller1: entered allmulticast mode [ 2365.388013][T27905] bridge_slave_1: left allmulticast mode [ 2365.394267][T27905] bridge_slave_1: left promiscuous mode [ 2365.400294][T27905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2365.415860][T27905] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2365.534794][T27911] tls_set_device_offload_rx: netdev not found [ 2365.583384][T27911] netlink: 'syz.3.12819': attribute type 23 has an invalid length. [ 2365.635023][T27914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12819'. [ 2365.655171][T27908] lo speed is unknown, defaulting to 1000 [ 2366.009867][T27923] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12824'. [ 2366.222228][T27929] lo speed is unknown, defaulting to 1000 [ 2366.396642][T27947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12832'. [ 2366.407283][T27947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12832'. [ 2366.514212][T27956] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12834'. [ 2366.555202][T27953] lo speed is unknown, defaulting to 1000 [ 2366.585012][T27958] batadv_slave_0: entered promiscuous mode [ 2366.736661][T27957] batadv_slave_0: left promiscuous mode [ 2367.128036][T27984] netlink: 'syz.1.12843': attribute type 3 has an invalid length. [ 2367.159285][T27988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12842'. [ 2367.173979][T27987] netlink: 'syz.4.12844': attribute type 21 has an invalid length. [ 2367.182626][T27987] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12844'. [ 2367.291517][T27984] nbd: must specify a size in bytes for the device [ 2367.298512][T27984] nbd: couldn't find device at index 1 [ 2367.384202][T27984] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2367.469214][T27990] bridge0: left promiscuous mode [ 2367.481867][T27990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2367.497847][T27990] 8021q: adding VLAN 0 to HW filter on device team0 [ 2367.520801][T27990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2367.547390][T28006] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 2367.598010][T28006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12847'. [ 2367.727510][T28014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12851'. [ 2367.802949][T16181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2367.925794][T28021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.038459][T28021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.162560][T28021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.195946][T28038] team0: Device macvlan2 failed to change mtu [ 2368.247006][T28042] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2368.289817][T28021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.375128][T28048] syzkaller1: entered promiscuous mode [ 2368.395016][T28048] syzkaller1: entered allmulticast mode [ 2368.646773][T16185] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.756166][T13197] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.821285][T16181] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.857474][T16185] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.890857][T28083] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12868'. [ 2368.984594][T28105] netlink: 'syz.0.12873': attribute type 1 has an invalid length. [ 2369.121586][T28111] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2369.218767][T28116] netlink: 'syz.0.12878': attribute type 8 has an invalid length. [ 2369.581359][T28129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2369.597773][T28129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2369.681191][T28129] bond2: left promiscuous mode [ 2369.785239][T28137] syzkaller0: entered promiscuous mode [ 2369.795236][T28137] syzkaller0: entered allmulticast mode [ 2369.807894][T13197] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2369.905597][T28156] netlink: 'syz.2.12889': attribute type 1 has an invalid length. [ 2370.017692][T28164] Bluetooth: MGMT ver 1.23 [ 2370.037248][T28165] set match dimension is over the limit! [ 2370.047240][T28165] nbd: must specify a size in bytes for the device [ 2371.002168][T16185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2371.771614][T13197] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2371.786316][T28156] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2371.794442][T28160] gretap1: entered allmulticast mode [ 2371.852519][T13197] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2371.868935][T13197] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2371.987352][T28175] ipt_ECN: cannot use operation on non-tcp rule [ 2372.007094][T28175] netlink: 'syz.3.12892': attribute type 32 has an invalid length. [ 2372.007159][T28180] lo speed is unknown, defaulting to 1000 [ 2372.015169][T28175] __nla_validate_parse: 5 callbacks suppressed [ 2372.015186][T28175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12892'. [ 2372.015224][T28175] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 2372.139563][T28192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12896'. [ 2372.175568][T13197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.185270][T13197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.194697][T28175] lo speed is unknown, defaulting to 1000 [ 2372.201996][T13197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.258817][T13197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.265536][T28199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12897'. [ 2372.400788][T28204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12899'. [ 2372.427583][T28204] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 2372.444833][T28211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12901'. [ 2372.461715][T28204] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12899'. [ 2373.561660][T16181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2376.121516][T16194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2376.132677][ T2063] block nbd4: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 240 seconds [ 2376.143529][ T2063] block nbd4: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 240 seconds [ 2376.154647][ T2063] block nbd4: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 240 seconds [ 2376.165654][ T2063] block nbd4: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 240 seconds [ 2378.194804][T28234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12905'. [ 2378.369732][T28246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12908'. [ 2378.600928][T28254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12909'. [ 2378.720322][T28282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12912'. [ 2378.785909][T28288] x_tables: duplicate underflow at hook 3 [ 2378.895218][T28282] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2379.072998][T28295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12916'. [ 2379.304547][T28315] xt_hashlimit: size too large, truncated to 1048576 [ 2379.325836][T16190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2379.327789][T28315] xt_hashlimit: max too large, truncated to 1048576 [ 2379.393852][T28298] lo speed is unknown, defaulting to 1000 [ 2380.602257][ T3973] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2381.324413][T28246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2381.482146][T28332] bridge3: entered promiscuous mode [ 2381.487404][T28332] bridge3: entered allmulticast mode [ 2381.722117][T28357] Bluetooth: MGMT ver 1.23 [ 2381.736113][T28358] x_tables: duplicate underflow at hook 3 [ 2381.747763][T28357] x_tables: duplicate underflow at hook 3 [ 2381.881619][T16194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2381.961913][T28381] 8021q: VLANs not supported on wg0 [ 2382.114827][T28393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12937'. [ 2382.209701][T28393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12937'. [ 2382.220854][T28393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12937'. [ 2382.354388][T28410] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12941'. [ 2382.378698][T28414] netlink: 'syz.1.12944': attribute type 1 has an invalid length. [ 2382.389572][T28410] netlink: 'syz.4.12941': attribute type 1 has an invalid length. [ 2382.401723][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12943'. [ 2382.561370][T28423] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2382.603823][T28426] vlan4: entered promiscuous mode [ 2382.608949][T28426] dummy0: entered promiscuous mode [ 2383.277754][T28441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2383.391679][T28441] lo speed is unknown, defaulting to 1000 [ 2383.603240][T28458] lo speed is unknown, defaulting to 1000 [ 2383.807150][T28474] lo speed is unknown, defaulting to 1000 [ 2384.110771][T28487] __nla_validate_parse: 3 callbacks suppressed [ 2384.110788][T28487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12964'. [ 2384.146189][T28485] tap0: tun_chr_ioctl cmd 1074025677 [ 2384.153687][T28485] tap0: linktype set to 6 [ 2384.299072][T28496] netlink: 'syz.0.12967': attribute type 153 has an invalid length. [ 2384.477329][ T2063] block nbd0: Possible stuck request ffff88803c9c0000: control (read@0,1024B). Runtime 180 seconds [ 2384.488175][ T2063] block nbd0: Possible stuck request ffff88803c9c0200: control (read@1024,1024B). Runtime 180 seconds [ 2384.499232][ T2063] block nbd0: Possible stuck request ffff88803c9c0400: control (read@2048,1024B). Runtime 180 seconds [ 2384.513243][ T2063] block nbd0: Possible stuck request ffff88803c9c0600: control (read@3072,1024B). Runtime 180 seconds [ 2384.535978][T28503] netlink: 'syz.0.12971': attribute type 3 has an invalid length. [ 2384.576445][T28503] netlink: 'syz.0.12971': attribute type 3 has an invalid length. [ 2384.912095][T28523] lo speed is unknown, defaulting to 1000 [ 2385.008825][T28541] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12977'. [ 2385.056300][T28540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12976'. [ 2385.067033][T28540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12976'. [ 2385.077394][T28535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12976'. [ 2385.091941][T16184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2385.374629][T28555] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12982'. [ 2385.545627][T28566] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2385.668419][T28570] syzkaller0: entered promiscuous mode [ 2385.674689][T28570] syzkaller0: entered allmulticast mode [ 2385.750095][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12989'. [ 2387.004704][T16181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2388.061183][T28627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13004'. [ 2388.064818][T28632] netlink: 'syz.0.13005': attribute type 10 has an invalid length. [ 2388.101203][T28626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13004'. [ 2388.115138][T28631] netlink: 'syz.0.13005': attribute type 10 has an invalid length. [ 2388.217995][T28632] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2388.377248][T28651] lo speed is unknown, defaulting to 1000 [ 2388.467248][T28650] netlink: 'syz.1.13009': attribute type 1 has an invalid length. [ 2388.506459][T28650] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13009'. [ 2388.921570][T24340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2390.841688][T13197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2391.274697][ T6672] lec:lec_start_xmit: lec0:No lecd attached [ 2391.861024][ T5191] udevd[5191]: worker [22161] /devices/virtual/block/nbd0 timeout; kill it [ 2391.871993][ T5191] udevd[5191]: seq 68438 '/devices/virtual/block/nbd0' killed [ 2392.770992][T13197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2395.197637][T28690] nftables ruleset with unbound set [ 2395.208118][T28688] syzkaller0: entered promiscuous mode [ 2395.220867][T28688] syzkaller0: entered allmulticast mode [ 2395.448597][T28704] lo speed is unknown, defaulting to 1000 [ 2395.522130][T28700] delete_channel: no stack [ 2395.560991][T28711] netlink: 'syz.0.13017': attribute type 5 has an invalid length. [ 2395.587222][T28713] netlink: 'syz.2.13019': attribute type 3 has an invalid length. [ 2395.610657][T28719] netlink: 596 bytes leftover after parsing attributes in process `syz.1.13020'. [ 2395.622379][T28719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13020'. [ 2395.648157][T28719] team0 (unregistering): Port device team_slave_0 removed [ 2395.658029][T28719] team0 (unregistering): Port device team_slave_1 removed [ 2395.711567][T28725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13023'. [ 2395.718216][T28724] tipc: Started in network mode [ 2395.729395][T28724] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 2395.739042][T28724] tipc: Enabling of bearer rejected, failed to enable media [ 2395.875046][T28733] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13026'. [ 2396.143705][T28743] syzkaller0: entered promiscuous mode [ 2396.156956][T28743] syzkaller0: entered allmulticast mode [ 2396.521976][T28763] netlink: 'syz.4.13032': attribute type 1 has an invalid length. [ 2396.543321][T28764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13032'. [ 2396.580596][T28764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13032'. [ 2396.602646][T13197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2396.920597][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 2396.928698][ C1] lec:lec_tx_timeout: lec0 [ 2398.536583][T16194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2399.058559][T28763] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2399.121013][T28794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13038'. [ 2399.145593][T28794] IPVS: Unknown mcast interface: vcan0 [ 2399.283850][T28802] syzkaller1: entered promiscuous mode [ 2399.289370][T28802] syzkaller1: entered allmulticast mode [ 2399.403175][T28811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13042'. [ 2399.586355][T28824] bond1 (unregistering): Released all slaves [ 2399.606447][T28827] x_tables: duplicate underflow at hook 1 [ 2399.626960][T28830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13047'. [ 2399.639796][T28830] bond0: entered allmulticast mode [ 2399.648019][T28830] bridge0: entered allmulticast mode [ 2399.702206][T28833] netlink: 160 bytes leftover after parsing attributes in process `syz.1.13046'. [ 2400.206001][T28869] netlink: 'syz.3.13057': attribute type 9 has an invalid length. [ 2400.446071][T28883] lo speed is unknown, defaulting to 1000 [ 2400.523816][T28879] bond1: entered promiscuous mode [ 2400.625015][T28879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2400.665553][T28892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2400.672764][T28892] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 2400.695520][T28892] bond1: (slave sit1): Error -95 calling set_mac_address [ 2400.991452][ T5486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2402.361115][T16185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2403.641389][T16184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2406.208645][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2406.230714][ T2063] block nbd4: Possible stuck request ffff888027280000: control (read@0,1024B). Runtime 270 seconds [ 2406.241736][ T2063] block nbd4: Possible stuck request ffff888027280200: control (read@1024,1024B). Runtime 270 seconds [ 2406.252934][ T2063] block nbd4: Possible stuck request ffff888027280400: control (read@2048,1024B). Runtime 270 seconds [ 2406.264364][ T2063] block nbd4: Possible stuck request ffff888027280600: control (read@3072,1024B). Runtime 270 seconds [ 2406.711285][T28942] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 2406.720667][T28942] syzkaller0: entered promiscuous mode [ 2406.726201][T28942] syzkaller0: entered allmulticast mode [ 2407.737999][T29002] [ 2407.740372][T29002] ====================================================== [ 2407.747388][T29002] WARNING: possible circular locking dependency detected [ 2407.754476][T29002] syzkaller #0 Not tainted [ 2407.758881][T29002] ------------------------------------------------------ [ 2407.765882][T29002] syz.4.13081/29002 is trying to acquire lock: [ 2407.772018][T29002] ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 2407.781350][T29002] [ 2407.781350][T29002] but task is already holding lock: [ 2407.788746][T29002] ffff88808d498870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 2407.797967][T29002] [ 2407.797967][T29002] which lock already depends on the new lock. [ 2407.797967][T29002] [ 2407.808357][T29002] [ 2407.808357][T29002] the existing dependency chain (in reverse order) is: [ 2407.817355][T29002] [ 2407.817355][T29002] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 2407.825433][T29002] _raw_spin_lock_bh+0x36/0x50 [ 2407.830719][T29002] nr_rt_device_down+0x153/0x860 [ 2407.836172][T29002] nr_device_event+0x137/0x150 [ 2407.841448][T29002] notifier_call_chain+0x1be/0x400 [ 2407.847108][T29002] netif_close_many+0x2ae/0x420 [ 2407.852580][T29002] netif_close+0x160/0x220 [ 2407.857518][T29002] dev_close+0x10a/0x220 [ 2407.862396][T29002] bpq_device_event+0x377/0x6a0 [ 2407.867850][T29002] notifier_call_chain+0x1be/0x400 [ 2407.873499][T29002] netif_close_many+0x2ae/0x420 [ 2407.878907][T29002] netif_close+0x160/0x220 [ 2407.883843][T29002] dev_close+0x10a/0x220 [ 2407.888605][T29002] bond_setup_by_slave+0x5f/0x3e0 [ 2407.894244][T29002] bond_enslave+0x847/0x3c10 [ 2407.899346][T29002] bond_do_ioctl+0x6ec/0x8d0 [ 2407.904451][T29002] bond_siocdevprivate+0x19c/0x1f0 [ 2407.910079][T29002] dev_ifsioc+0xba6/0x1280 [ 2407.915105][T29002] dev_ioctl+0x84c/0x1150 [ 2407.919950][T29002] sock_ioctl+0x75f/0x7f0 [ 2407.924793][T29002] __se_sys_ioctl+0xfc/0x170 [ 2407.929906][T29002] do_syscall_64+0x14d/0xf80 [ 2407.935020][T29002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2407.941433][T29002] [ 2407.941433][T29002] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 2407.949249][T29002] _raw_spin_lock_bh+0x36/0x50 [ 2407.954532][T29002] nr_rt_device_down+0xbe/0x860 [ 2407.959902][T29002] nr_device_event+0x137/0x150 [ 2407.965180][T29002] notifier_call_chain+0x1be/0x400 [ 2407.970809][T29002] netif_close_many+0x2ae/0x420 [ 2407.976211][T29002] netif_close+0x160/0x220 [ 2407.981142][T29002] dev_close+0x10a/0x220 [ 2407.985900][T29002] bpq_device_event+0x377/0x6a0 [ 2407.991261][T29002] notifier_call_chain+0x1be/0x400 [ 2407.996896][T29002] netif_close_many+0x2ae/0x420 [ 2408.002265][T29002] netif_close+0x160/0x220 [ 2408.007196][T29002] dev_close+0x10a/0x220 [ 2408.011955][T29002] bond_setup_by_slave+0x5f/0x3e0 [ 2408.017491][T29002] bond_enslave+0x847/0x3c10 [ 2408.022591][T29002] bond_do_ioctl+0x6ec/0x8d0 [ 2408.027694][T29002] bond_siocdevprivate+0x19c/0x1f0 [ 2408.033320][T29002] dev_ifsioc+0xba6/0x1280 [ 2408.038250][T29002] dev_ioctl+0x84c/0x1150 [ 2408.043091][T29002] sock_ioctl+0x75f/0x7f0 [ 2408.047931][T29002] __se_sys_ioctl+0xfc/0x170 [ 2408.053075][T29002] do_syscall_64+0x14d/0xf80 [ 2408.058187][T29002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2408.064597][T29002] [ 2408.064597][T29002] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 2408.072494][T29002] __lock_acquire+0x15a5/0x2cf0 [ 2408.077862][T29002] lock_acquire+0xf0/0x2e0 [ 2408.082794][T29002] _raw_spin_lock_bh+0x36/0x50 [ 2408.088079][T29002] nr_rt_ioctl+0x40c/0xf90 [ 2408.093009][T29002] sock_do_ioctl+0x101/0x320 [ 2408.098111][T29002] sock_ioctl+0x5c6/0x7f0 [ 2408.102953][T29002] __se_sys_ioctl+0xfc/0x170 [ 2408.108059][T29002] do_syscall_64+0x14d/0xf80 [ 2408.113163][T29002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2408.119567][T29002] [ 2408.119567][T29002] other info that might help us debug this: [ 2408.119567][T29002] [ 2408.129779][T29002] Chain exists of: [ 2408.129779][T29002] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 2408.129779][T29002] [ 2408.143601][T29002] Possible unsafe locking scenario: [ 2408.143601][T29002] [ 2408.151069][T29002] CPU0 CPU1 [ 2408.156421][T29002] ---- ---- [ 2408.161864][T29002] lock(&nr_node->node_lock); [ 2408.166619][T29002] lock(nr_node_list_lock); [ 2408.173719][T29002] lock(&nr_node->node_lock); [ 2408.180999][T29002] lock(nr_neigh_list_lock); [ 2408.185751][T29002] [ 2408.185751][T29002] *** DEADLOCK *** [ 2408.185751][T29002] [ 2408.193878][T29002] 2 locks held by syz.4.13081/29002: [ 2408.199143][T29002] #0: ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 2408.208721][T29002] #1: ffff88808d498870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 2408.218384][T29002] [ 2408.218384][T29002] stack backtrace: [ 2408.224258][T29002] CPU: 1 UID: 0 PID: 29002 Comm: syz.4.13081 Not tainted syzkaller #0 PREEMPT(full) [ 2408.224279][T29002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2408.224290][T29002] Call Trace: [ 2408.224298][T29002] [ 2408.224307][T29002] dump_stack_lvl+0xe8/0x150 [ 2408.224333][T29002] print_circular_bug+0x2e1/0x300 [ 2408.224360][T29002] check_noncircular+0x12e/0x150 [ 2408.224384][T29002] __lock_acquire+0x15a5/0x2cf0 [ 2408.224412][T29002] lock_acquire+0xf0/0x2e0 [ 2408.224430][T29002] ? nr_rt_ioctl+0x40c/0xf90 [ 2408.224454][T29002] ? nr_rt_ioctl+0x40c/0xf90 [ 2408.224474][T29002] _raw_spin_lock_bh+0x36/0x50 [ 2408.224494][T29002] ? nr_rt_ioctl+0x40c/0xf90 [ 2408.224515][T29002] nr_rt_ioctl+0x40c/0xf90 [ 2408.224539][T29002] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 2408.224563][T29002] ? apparmor_capable+0x126/0x170 [ 2408.224663][T29002] ? capable+0x88/0xe0 [ 2408.224683][T29002] ? nr_ioctl+0x1b1/0x3b0 [ 2408.224701][T29002] sock_do_ioctl+0x101/0x320 [ 2408.224722][T29002] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2408.224739][T29002] ? do_futex+0x333/0x420 [ 2408.224764][T29002] sock_ioctl+0x5c6/0x7f0 [ 2408.224781][T29002] ? __pfx_sock_ioctl+0x10/0x10 [ 2408.224798][T29002] ? __fget_files+0x2a/0x420 [ 2408.224821][T29002] ? __fget_files+0x3a0/0x420 [ 2408.224843][T29002] ? __fget_files+0x2a/0x420 [ 2408.224865][T29002] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2408.224886][T29002] ? __pfx_sock_ioctl+0x10/0x10 [ 2408.224903][T29002] __se_sys_ioctl+0xfc/0x170 [ 2408.224921][T29002] do_syscall_64+0x14d/0xf80 [ 2408.224944][T29002] ? trace_irq_disable+0x3b/0x150 [ 2408.224966][T29002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2408.224983][T29002] ? clear_bhb_loop+0x40/0x90 [ 2408.225000][T29002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2408.225016][T29002] RIP: 0033:0x7fc7ae59c799 [ 2408.225033][T29002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2408.225053][T29002] RSP: 002b:00007fc7af3d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2408.225070][T29002] RAX: ffffffffffffffda RBX: 00007fc7ae815fa0 RCX: 00007fc7ae59c799 [ 2408.225082][T29002] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 2408.225092][T29002] RBP: 00007fc7ae632c99 R08: 0000000000000000 R09: 0000000000000000 [ 2408.225103][T29002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2408.225112][T29002] R13: 00007fc7ae816038 R14: 00007fc7ae815fa0 R15: 00007ffcac8ab748 [ 2408.225130][T29002] [ 2408.469789][T16184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2408.775143][T29002] bridge0: port 2(bridge_slave_1) entered disabled state [ 2408.782616][T29002] bridge0: port 1(bridge_slave_0) entered disabled state [ 2409.027353][T29002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2409.056435][T29002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2409.331020][T16194] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.344712][T16194] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.354850][T16194] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.364236][T16194] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.970733][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 2411.978784][ C1] lec:lec_tx_timeout: lec0 [ 2414.531237][ T2063] block nbd0: Possible stuck request ffff88803c9c0000: control (read@0,1024B). Runtime 210 seconds [ 2414.541981][ T2063] block nbd0: Possible stuck request ffff88803c9c0200: control (read@1024,1024B). Runtime 210 seconds [ 2414.553003][ T2063] block nbd0: Possible stuck request ffff88803c9c0400: control (read@2048,1024B). Runtime 210 seconds [ 2414.563973][ T2063] block nbd0: Possible stuck request ffff88803c9c0600: control (read@3072,1024B). Runtime 210 seconds